A BZ Media Publication 



• SOFTWARE DEVELOPMENT 




SPECIAL REPORT 

Shaping Up 
With SOA 



The Industry Newspaper for Software Development Managers 




page 29 



FEBRUARY 1, 2009 • ISSUE NO. 215 



www.sdtimes.com • $9.95 



SCO to sell off assets 
under bankruptcy plan 



BY JEFF FEINMAN 

The SCO Group filed its second 
Chapter 11 reorganization plan 
with United States Bankruptcy 
Court, calling for the divestiture 
of its OpenServer Unix product 
line and its mobile business divi- 
sion. 

The plan, filed in January, 
calls for a public auction of those 
assets, leaving the UnixWare 
business remaining with SCO. In 
a letter to customers and share- 
holders, Darl McBride, SCO's 
CEO, claimed that several 
investment groups have shown 
interest in acquiring SCO assets. 

One of the goals of the auc- 
tion is to separate SCO's intellec- 



tual property litigation from its 
product business. UnixWare is 
the operating system that SCO 
acquired from Novell in 1995; it 
is not part of the auction because 
it is tied up in SCO's court cases. 
The reorganization plan is 
expected to be approved or 
denied by a bankruptcy court in 
the next few months. 

Jeff Hunsaker, president and 
COO of SCO, said the objective is 
to sell OpenServer and the mobile 
business unit, then to use the pro- 
ceeds to exit bankruptcy. The 
SCO Group itself would continue 
on with its pending litigation 
against IBM, Novell and others, 
while some company employees, 



including the engineering and 
sales teams, would merge into the 
entity that acquires the properties, 
Hunsaker said. 

"If [the auction] did transpire 
and those assets were sold, then 
what remains with the SCO 
Group as a publicly traded com- 
pany would be the litigation and 
rights of the UnixWare business," 
Hunsaker said. "The majority of 
employees and customers, 
assuming the assets are pur- 
chased, would then capitalize 
and invest in the new business." 

Analyst Rob Enderle that in a 
recessionary market, organiza- 
tions that even have interest in 
continued on page 26 ► 




Agile devs act 
up in training 

Improv and games 
used to ease into 
technique page 5 



Engine Yard gives clouds a backbone 

Cloud coordination and control project launched 




BY ALEX HANDY 

It's early yet, but Engine Yard just may be the 
company that brings light to a cloud-filled 
sky. In December, this Ruby-focused 
hosting and development company quietly 
unveiled Vertebra, an open-source project that 
uses DNS and XMPP (Extensible Messaging 
and Presence Protocol) to form the 
secure backbone of future cloud- 
based applications. Vertebra 0.3 
was announced in January. 
Jayson Vantuyl, systems archi- 
tect and co-founder of San Fran- 



Jayson Vantuyl, co-founder of Engine Yard, 
hopes Vertebra will protect the 
backbones of cloud-distributed applications. 



cisco-based Engine Yard, admits that the Ver- 
tebra approach is a new tack against the winds 
currently blowing the clouds. He said that this 
cloud management and development frame- 
work is focused on applications rather than 
tracking and maintaining virtual machines. 

"We've developed something we call an 
operation. An operation is a negotiation over 
the network," said Vantuyl, describing his com- 
pany's replacement for virtualized instances of 
servers. "A lot of people like to put a messaging 
queue in the middle. We like keeping all the 
state in the endpoints. We've written a way that 
when you do your operation, [Vertebra] finds 
out where it needs to run and runs it." 

Vertebra foregoes the classic SOA approach 
continued on page 25 ► 



Borland's health 
at issue after 
CEO departs 

BY JEFF FEINMAN 

As Borland Software moves on 
after the departure of CEO Tod 
Nielsen, one analyst questions 
the health of a company that has 
seen two top executives leave 
and has low preliminary earnings 
for the fourth quarter of 2008. 

Nielsen resigned from Bor- 
land to become COO of 
VMware, but he will remain on 
Borland's board of directors. He 
had been the company's presi- 
dent and CEO since November 
2005 before announcing he had 
joined VMware ^^^^^^^^™ 
on Jan. 6. That EDITORS ON 
j r,™ NIELSEN AND 
same day, CbO _~-. ...-* 
_ . ^ J \ BORLAND 

Erik Prusch was PAGE 38 
appointed act- 



ing president and CEO. 

Bola Rotibi, a principal ana- 
lyst with Macehiter Ward-Dut- 
ton, said that one has to question 
how well things are going at Bor- 
land with Nielsen leaving the 
company while their share prices 
and revenue haven't been strong. 

"I think a lot of people will 
say, Tod's moving on,' and this 
and that, but we're not talking 
about going to be COO of IBM, 
which would be an offer you 
can't refuse," Rotibi said. "When 
you think about these things, you 
sort of have to say to yourself, 
Things can't be so fantastic at 
Borland, because otherwise he 
wouldn't have left.' 

"I think Borland's going to 

have some tricky times; however, 

they believe they're well-placed 

continued on page 26 ► 
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Merb, Rails teams join together 



BY ALEX HANDY 

Yehuda Katz spent an entire 
year screaming about Ruby-on- 
Rails' mailer framework. In the 
end, he decided to simply build 
his own runtime and framework 
to replace Rails. That open- 
source framework came to be 
known as Merb. 

But the Rails team didn't 
ignore Katz. He and some of his 
fellow Merbivores, in fact, have 
been asked to refactor Rails in 
Merb s image. 

The entire affair began as a 
rather heated argument, said 
Katz. "Two weeks before the 
merge, there was a pretty visi- 
ble spat between the Rails and 
Merb teams. It ended reason- 
ably well. Everybody agreed to 
Kumbaya a little. It had been 
the culmination of a cold war 
scenario," he said. 

That battle was over bench- 
marks and other areas where 
the Merb faithful said their 
framework was better than 
Rails. Another of those areas 
was modularity, said Katz 

David Heinemeier Hansson, 
creator of the Ruby-on- Rails 





1 



Yehuda Katz, Merb lead developer, 
is refactoring Rails in Merb's image. 

framework, has written exten- 
sively on his blog (www. loud- 
thinking, com) about the changes 
Rails 3.0 will undergo. On the 
topic of merging Merb into 
Rails, he wrote, "I've been work- 
ing on Rails for more than five 
years. Obviously I've poured 
much of my soul, talent and ded- 
ication into this ... The cultural 
impact of what is good [about] 
Rails has spread far and wide and 
touched lots of programmers. 

"These programmers share 
a similar Weltanschauung 



[world view], but they don't 
need to care only about the 
things that I care about. In fact, 
the system works much better 
if they care about different 
things than I do." 

When the dust settled, Katz, 
Lori Holden and Carl Lerche 
began working on Rails full 
time, while the rest of the Merb 
team all turned into Rails con- 
tributors. Katz forked the pro- 
ject on GitHub and began the 
heavy task of refactoring. 

"One way of doing this 
would be to completely ice the 
existing Rails codebase and try 
to rebuild the features from the 
ground up. But there's so 
much existing quirkiness that 
as you start to look at it," it's not 
really a good option, said Katz. 
"The alternative is to go 
through Rails and do massive 
refactoring. I went through all 
the code in a render pass and 
it's not really recognizable as 
the old code." 

That means a lot of testing, 
however, and Katz soon learned 
that he needed to run the entire 
battery of more than 1,000 tests 



after every single change he 
made to the Rails code. 

ENDGAME 

The result of all this refactor- 
ing should be a more perfor- 
mant, more flexible Rails. Katz 
said that modularity in Rails 
would have allowed him to 
drop in a different mailing 
framework way back when he 
decided to start Merb out of 
his frustration with Rails. Merb 
already offers a wide variety of 
plug-ins that can be used to 
circumvent any aspect of the 
framework that users don't 
enjoy. He hopes that, with only 
a few changes, Merb plug-ins 
will be able to make the transi- 
tion to Rails 3.0. 

While Katz expects the team 
to have a beta of Rails 3.0 avail- 
able in May, he said that there's 
still a lot of work going on for 
Rails 2.3 and existing Merb 
releases. Merb will continue to 
receive bug fixes, as it is already 
popular and has an important 
user base, said Katz. But when 
Rails 3.0 is complete, Merb will 
likely die out. There will be a 



Apple falls from the Macworld tree 



BY ALEX HANDY 

The first full week of 2009 was 
booked wall-to-wall by Apple 
Computers, though it 
would be the last 
time. But while the SHOW 
conference will be 
back next year, Apple will be sit- 
ting it out. Apple announced its 
intentions to abstain from the 
expo, starting in December 
20101; the company declined to 
give a reason. 

Despite the bad news from 
Apple, attendees were still excit- 
ed about iPhones and the new 
series of 17-inch laptops. Raven 
Zachary, independent iPhone 
advisor (www.raven.me), said 
that Apple's development deci- 
sions around the iPhone were a 
boon to the platform. 

"I think Apple made a smart 
move using the same develop- 
ment environment for Mac 
development and the iPhone," 
said Zachary. "Objective C is 
very powerful. It's a fully fea- 
tured native programming envi- 
ronment. And Apple has its own 
IDE and debugging tools. It 
didn't have to go and reinvent all 
that for the mobile platform." 



Despite these moves, howev- 
er, Zachary said that enterprises 
still aren't on the iPhone train. 

"Enterprises so far 
have not been doing a 
lot of development for 
the iPhone," he said. 



SDTimes 



"What you're seeing is indepen- 
dent developers, Internet ser- 
vices and game publishers really 
leading the charge. I think you 
are going to see enterprise devel- 
opers do more on the iPhone, 
but it's going to take some time. 
"Right now, the enterprise 
participants have been lagging. 
But then, how many enterprises 
today actually build BlackBer- 
ry applications? Or Windows 
Mobile applications? Not many. 
You'll find smaller ISVs doing 
that development for a specific 
enterprise purpose." 

FILEMAKER STEPS UP 

As for software development 
news at Macworld, FileMaker 
revealed version 10 of its client 
and server software. On the serv- 
er-side, this database storage sys- 
tem received performance 
updates and optimizations. 
Those server-side fixes trickle 




Though this would be the last MacWorld for Apple, many attendees 
expressed interest in next year's event. 



down to time savings on the 
client-side, which feels quicker 
thanks to the upstream changes. 

FileMaker Client version 10 
can now trigger scripts on user 
actions. The update is back- 
wards compatible, and old File- 
Maker databases do not need to 
be updated in order to use 
these new triggers, said Robert 
Holsey, technical support engi- 
neer at FileMaker. 

Real BASIC also released an 
updated server component. This 
point-and-click development 
environment can be paired with 
a simple server-side database 



called Real BASIC Server. The 
new edition of the Real BASIC 
Server was optimized and should 
be more responsive. 

Zachary said he will return 
next year despite Apple's 
absence. 

"As always, Macworld's 
biggest strength is networking 
with your peers and people in 
the industry. Obviously, losing 
Steve Jobs' keynote was a 
blow," said Zachary. "We'll see 
how Macworld 2010 goes. I'm 
still planning to attend, but my 
assumption is things are going 
to be way down." I 



transition release, however, 
which will bridge the gap 
between Rails and Merb. 

Rails 2.3 was expected to be 
out at the end of January, and 
once it's complete, the existing 
Rails core team will be able to 
focus on helping Katz rework 
the framework. 

One thing that should help 
speed up Rails 3.0 is the pushing 
of server duties out into the Web 
server. Merb already does this, 
and as a result it can restart 
faster than Rails when some- 
thing goes wrong, said Katz. 

"We did a bunch of stuff that 
added server-like capabilities to 
Merb itself," said Katz. "Rails 
can't hook into that process. 
Merb was able to hook in and 
shorten restart times. 

"Passenger has been a pretty 
big deal. Passenger is an Apache 
module that behaves similarly to 
how the Merb server behaves. It 
handles pre-forking and sending 
off requests. There have defi- 
nitely been some issues with it 
early on, but those issues are 
largely gone now. We're proba- 
bly going to see more solutions 
along those lines where they 
move responsibility for system- 
level stuff out of Ruby. For pro- 
duction situations, I really think 
that moving the whole problem 
back into the realm of Web 
servers is probably the long- 
term answer to the problem." 

The unexpected fact that this 
merger came out of a very public 
online spat was not lost on Hans- 
son. He put his thoughts on the 
conflict onto his blog. 

"I think what really brought 
this change around was the 
realization that we largely share 
the same sensibilities about 
code," he wrote. "That we're all 
fundamentally Rubyists with 
very similar views about the big 
picture. That the rift in many 
ways was a false one. Founded 
on lack of communication and a 
mistaken notion that because 
we care about working on dif- 
ferent things, we must some- 
how be in opposition. 

"Once we realized that, it 
seemed rather silly to continue 
the phantom drama. While 
there's undoubtedly a deep- 
founded need for humans to 
see and pursue conflict, there 
are much bigger and more 
worthwhile targets to chase 
together rather than amongst 
ourselves. Yes, I'm looking at 
you J2EE, .NET and PHP." I 
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Setting the stage for 
agile development 

Trainers use improv, theater techniques 
to promote collaboration, group-thinking 



BY JEFF FEINMAN 

Laughing. Overcoming embar- 
rassment. Out-and-out goofy 
behavior. These are not normal- 
ly the skills managers seek in 
their developers. But some 
agile development advocates 
believe these skills are critical 
for successful software projects. 

A growing number of artisti- 
cally inclined corporate trainers 
are promoting the principles of 
the Agile Manifesto with tech- 
niques from acting, improvisa- 
tion and other art forms. Such 
exercises attempt to prepare 
software developers for chang- 
ing requirements and other 
unexpected occurrences 

throughout the agile develop- 
ment process. Developers learn 
better ways to work together 
and how to put the team before 
the individual. 

These trainers assist soft- 
ware teams in interactive work- 



shops to learn how to get the 
most out of their abilities. They 
"act" their way out of scenarios, 
participate in team-building 
games, make art projects and 
do other exercises to build con- 
centration and innovation. 

"Any artist that's ever com- 
pleted anything will tell you 
that an empty feeling always 
precedes success," said Matt 
Smith, a Seattle-based corpo- 
rate trainer who teaches impro- 
visational theater principles. 
"You have to break through 
something to get to the other 
side, and the breaking through 
involves what can be perceived 
as pain, and we're trained in life 
to avoid that pain at all costs. 
But if we're going to do Scrum 
and agile, we have to come to 
terms with that feeling and stop 
perceiving it as something to 
run from." 

Smith got into acting when he 



was 30 years old after trying his 
hand at being a writer and a 
standup comedian. Improvisa- 
tional theater changed how he 
communicated with people, and 
it made him a better person to 
his friends and family, he said. 

Utilizing his improvisational 
skills, Smith travels the country, 
conducting keynote speeches 
and workshops to build team 
skills and teach mind-expanding 
exercises. Naturally, many pro- 
fessionals will be suspicious 
about the relevance of theatrical 
techniques and how they pertain 
to their job, and Smith said he is 
sensitive to that. However, oth- 
ers take to the workshops easily 
and happily get involved. 

In a similar manner to 
Smith, Certified Scrum Trainer 
Stacia Broderick, who has the- 
ater training and plays classical 
violin, believes a certain energy 
continued on page 16 ► 





Matt Smith discusses with an agile team the importance of 
surrendering their individual agendas and control. 




Stacia Broderick, pointing, wants to see 
energy return to standup meetings. 



At agile workshops run by trainers such as Smith and Broderick, partici- 
pants are asked to leave their comfort zone to learn to deal with the und- 
expected when developing software. Clockwise from above, participants 
use sketch pads to create irreverant ads; cards and dice; balls and note 
paper; and balloons as tools to think in ways they are not accustomed to, 
or to learn to give up control over certain situations. 
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COMPANIES 



Intrinsyc Software, a provider of software products for mobile and 
embedded devices, completed an engineering services agreement 
with Unitech Electronics, a manufacturer and supplier of Automatic 
Identification and Data Capture products. Intrinsyc developed a data 
collection terminal for Unitech on Windows Mobile and Windows 
Embedded CE . . . Shunra Software, a provider of WAN emulation and 
software development testing products, has joined Microsoft's Visual 
Studio Industry Partners (VSIP) Program. The VSIP Program pro- 
vides technical and marketing help to members that have integrated 
their products with Visual Studio. The program has around 200 mem- 
bers, among them Altova, Borland, CA and JetBrains . . . Computer 
programming contest company TopCoder will be holding its annual 
TopCoder Open, a contest that has nine competitions for software pro- 
fessionals. The contests center on algorithms, component design, 
architecture and development, among other areas. The online compe- 
tition starts this month, and finalists will be announced June 1-4. To 
register or find out more information, visit www.topcoder.com/reg. 



DynaTrace 3.0 tracks 
distributed SOA transactions 



NEW PRODUCTS 



AlertSite, a creator of Web-based services and application prod- 
ucts, has released a Web performance monitor that gives informa- 
tion on the availability, load times and response times of Web-based 
applications. InSite provides a customizable viewpoint on the avail- 
ability and performance of enterprise applications, according to the 
company. 



UPDATES 



Adobe has created a full version of its LiveCycle ES Developer 
Express software for the Amazon 



BY DAVID WORTHINGTON 

Service-oriented architecture 
can be a boon for flexibility, but 
it adds another layer of com- 
plexity to information systems. 
A performance diagnostics soft- 
ware maker is attempting to cut 
through SO As complexity with 
a solution that traces transac- 
tions and maps application 
dependencies to provide visibil- 
ity into performance issues. 

DynaTrace Software re- 
leased DynaTrace 3.0, an appli- 
cation performance solution for 
SOA that works for both Java 
and .NET applications. 

Version 3.0 traces transac- 
tions across geographically dis- 
tributed systems, monitors 
large server clusters and virtu- 
alized environments, and intro- 
duces frameworks for integra- 
tions and extensibility. The 
software also integrates with 
build systems and requires few- 
er people to operate, according 
to the company. 

DynaTrace has extended its 



PurePath diagnosis technology 
to wide-area networks. All 
information that passes from 
diagnostic agents (which reside 
on target systems) to diagnostic 
servers is compressed and 
encrypted, said Klaus Fellner, 
senior director of product mar- 
keting. PurePath does not 
require proxies to trace transac- 
tions, he added. 

"One thing that my clients 
are talking about is the capabili- 
ty to track or trace transactions 
through complex systems," said 
Jean-Pierre Garbani, a vice pres- 
ident at Forrester Research. 
"That capability distinguishes 
DynaTrace from its main com- 
petitors." 

DynaTrace also provides 
application dependency map- 
ping and UML modeling. 
Through UML, DynaTrace can 
help testing engineers under- 
stand how a service s behavior in 
production compares to its 
behavior in testing, Fellner said. 

"People want to manage end- 



to-end, but [they] don't always 
know the dependencies of appli- 
cations on infrastructure at that 
level of detail," said Garbani. 

In addition, PurePath s agents 
and collectors now support large 
server clusters and virtualized 
environments, the company says. 
DynaTrace automatically adapts 
to cluster resizing and changes in 
virtual instances. 

Aside from Java and .NET, 
PurePath accepts open-source 
monitors developed for applica- 
tion servers and custom appli- 
cations, said Eric Senunas, 
senior director of marketing 
and business development for 
DynaTrace. Monitoring reports 
will include data from custom 
monitors. 

Role-based dashboards cor- 
relate transactions for opera- 
tions management profession- 
als, managers, and software 
architects. The dashboards 
that come out of the box are 
templates and are customiz- 
able, Senunas noted. 




Times are tough. You're busy. You don't need another sales pitch. 

So there's no hard-sell here. Just a chance to find out how Microsoft® products can work for you. 



And if you decide you want to develop products with Microsoft technology, we're offering you some 
useful benefits. Things like technical support, marketing advice, and testing vouchers. 

It's all part of a program called Innovate On. 
Signing up is easy. 

No pressure, 

just the information you need. 



Ready to kick start your development? Why not take a look at our early adopter program, 
Front Runner for Innovate On. 

It gives you great benefits, including telephone technical support, ready-to-go marketing 
templates, guidance through our technical training Web site, and use of the Front Runner for 
Innovate On badge. We're including more products in the program all the time, so check out 
www.innovateon.com/frontrunner and see if there is an early adopter program for you. 
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UML sequence visualization of a single SOA-based transaction across all layers, inside DynaTrace 3.0. 



When performance prob- 
lems proliferate, DynaTrace 3.0 
implements incident-triggered 
session capturing from PurePath 
sessions to help automate prob- 
lem documentation. The cap- 
tures may also be scheduled at 
regular intervals. The same data 
is used across all three editions 
of DynaTrace: Development, 
Test Center and Production. 



To discover defects early in 
the development life cycle, 
DynaTrace 3.0 integrates with 
build systems, enabling code 
level tests to be executed for 
new builds. 

The developers edition of 
DynaTrace supports build sys- 
tems, including Anthill, Apache 
Continuum, Bamboo, MS Build, 
NAnt and Quickbuild, accord- 



ing to DynaTrace s product doc- 
umentation. 

The integration is not limit- 
ed to testing: DynaTrace is 
built to be extensible across the 
development, test and produc- 
tion life cycles through an 
open-source OSGi-based plug- 
in model, Java Management 
Extensions, and Web service 
interfaces. I 




< continued from page 6 Web Services cloud computing envi- 

ronment. LiveCycle ES is used to build PDF applications, and Adobe 
executives said developers gain a virtual, self-contained environment 
to test applications without having to install and configure LiveCycle 
ES . . . Aldon has included new deployment capabilities in the latest 
version of its Aldon Lifecycle Manager software change manage- 
ment product. Aldon Lifecycle Manager 5.4 lets users define sets of 
deployment targets, so deployment scripts don't have to be written, 
according to the company . . . Web application security company 
Armorize Technologies has released a new version of its CodeSecure 
static source code analysis and verification product. CodeSecure 3.0 
has analysis capabilities for ASP.NET, Java/J2EE and PHP, as well as 
new reporting features to identify vulnerable entry points. There is 
also integration with Microsoft Active Directory for improved user 
and group management . . . Raxco Software, a provider of disk 
defragmentation software, has added integration with Windows 7 to a 
new version of its defrag product, PerfectDisk. The new version (ver- 
sion 10) maintains Microsoft's current certifications, including Win- 
dows Vista and Windows Server 2008, Raxco said. 



PEOPLE 



Greg Symon has been named vice president and general manager of 
North American sales for Red Hat. Prior to Red Hat, Symon held 
senior sales management positions during a 22-year tenure with Intel 
Corporation. He most recently served as senior managing director 
and founder of Intel's Global Software Relations organization within 
the company's Software Solutions Group . . . Former Red Hat COO 
Tim Buckley has joined enterprise application deployment company 
rPath as executive chairman of its board of directors. Buckley has 
over 20 years of experience with technology startups and was hired 
by Red Hat as COO in 1999. Most recently, he founded Buckley Invest- 
ments, a Raleigh, N.C.-based consulting company.! 
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From left to right: Ben Hood, Kirk Wylie, Alexis Richardson, Matthias Radestock and Neil 
Bartlett are the main men in RabbitMQ's quest to bring compatibility across message queues. 

RabbitMQ bounds 
toward interoperability 



BY ALEX HANDY 

When the Advanced Message Queuing 
Protocol (AMQP) began life in 2004, the 
world of message queues frightened 
many enterprises. With proprietary lock- 
in around most commercial queues, 
building an infrastructure around such 
software could result in years of expen- 
sive contracts and purchases from a sin- 
gle vendor, felt JP Morgan Chase's John 
O'Hara and the team he assembled to 
create AMQP. 

But almost five years later, the 
promise of compatibility across message 
queues is becoming reality. Sometime 
before the end of March, RabbitMQ, 
one of the most popular open-source 
AMQP implementations for cloud users 
according to numerous Amazon Web 
Services recipes popping up on the Web, 
will finally exhibit the interoperability 
AMQP was designed to foster. 

Kirk Wylie, a RabbitMQ contributor, 
said that the RabbitMQ project will soon 
be upgraded to support the 0.9.1 AMQP 
specification. "I came to the project from 
the financial services side," he said. "A lot 
of enterprises can get scared away from 
messaging because they get trapped in 
the proprietary solution. If you buy an 
IBM or TIBCO solution, you have to buy 
everything from them. If they aren't 
focusing on a platform you are interested 
in, you are in trouble. 

"I think one of the eventual promises 
of AMQP is to allow you to mix and 
match best of breed," he added. 

That's important for the myriad users 
who've surprised the RabbitMQ team by 
using the queue in unanticipated ways. 

Ben Hood, a member of the Rabbit- 
MQ engineering team that focuses on the 
community, said that typical enterprises 
are important yet predictable users of the 
software. The Web 2.0 crowd, however, 
has had other plans. 

"Classically, you think of some kind 
of market data feed application where 



it's all about getting messaging delivered 
very quickly, but in reality people want 
to use asynchronous messaging from us. 
I was asked by a user once, 'Can I use 
RabbitMQ like a buffet? I want to, 
every now and then, keep a level of 
things in Rabbit, and then replenish 
that.' People are always finding some- 
thing new and strange and interesting 
to do with it," said Hood. 

ERLANG'S DOWN THE RABBIT HOLE 

Because RabbitMQ is written in Erlang 
and uses the Open Telecom Platform 
(OTP), the message queue is dramatical- 
ly scalable. Matthias Radestock, chief 
engineer for RabbitMQ, said that even 
he was surprised by just how well Erlang 
OTP worked for the architecture. 

"It really does turn out that the way 
Erlang OTP was constructed is con- 
ducive to building messaging based 
applications," said Radestock. 

Alexis Richardson, the go-between 
for RabbitMQ and the AMQP working 
group, said that the message queue has a 
leg up on other AMQP implementa- 
tions, thanks in part to the large commu- 
nity that has already written clients in 
numerous languages. 

"Lots of people have done lots of 
things to make Rabbit work in multiple 
environments," said Richardson. "Anoth- 
er thing we have uniquely is stability at 
scale because of Erlang. We've invested a 
lot in that." Indeed, the RabbitMQ web- 
site claims Erlang OTP provides nine 
nines of availability. 

Late last year, version 0.9.1 of AMQP 
was released, bringing various versions 
of the message queue in line with each 
other, delivering on the promise of com- 
patibility across the different implemen- 
tations of the specification. RabbitMQ 
currently supports version 0.8 of the 
specification. The 1.0 version should 
arrive late this year, according to the 
RabbitMQ team. I 
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SOA Software tackles project planning 

Portfolio Manager helps organizations prioritize service candidates for higher ROI 



BY DAVID WORTHINGTON 

A developer of service oriented 
architecture infrastructure soft- 
ware has released a project- 



planning suite. The company 
says it will help enterprises tran- 
sition to SOA by prioritizing 
small projects that align to busi- 



ness objectives and provide the 
highest return on investment. 

SOA Software announced 
the availability of Portfolio 



Manager, a project-planning 
governance tool. The software 
helps organizations identify and 
inventory software assets, build 
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a SOA road map, and plan gov- 
ernance methods for service 
development. 

Portfolio management helps 
enterprises build the right ser- 
vices at the right time through 
asset identification, said Ian 
Goldsmith, vice president of 
product management for SOA 
Software. 

"We flat out tell customers 
that they will fail if they attempt 
SOA top down," said CTO Alis- 
tair Farquharson. "Customers 
do not have to go to the effort 
of exposing every service." 

Instead, Portfolio Manager 
can help companies achieve ear- 
ly successes by helping develop- 
ers prioritize the development 
of candidate services and under- 
stand dependencies among 
them, Goldsmith explained. 
"Those successes can help drive 
the cultural shift that is required 
for successful enterprise SOA." 

To assist with SOA road-map 
planning, Portfolio Manager 
creates high-level business 
reports on ROI for manage- 
ment, in addition to more tech- 
nical reports that help develop- 
ers align services to IT 
initiatives, said Farquharson. 

Portfolio Manager produces 
SOA road maps that represent 
both current and planned archi- 
tectural models. To ensure that 
services are built correctly, it 
integrates with SOA Softwares 
Repository Manager develop- 
ment-time governance software, 
as well as to third-party asset 
management offerings offered 
by Hewlett-Packard, IBM and 
TIBCO, Farquharson said. 

Customers have the option 
of writing their own connectors 
for other UDDI compliant soft- 
ware or obtaining one from 
SOA Software through a pro- 
fessional services engagement, 
noted Farquharson. Portfolio 
Manager delivers packaged 
SOA planning governance 
methods and meta-models for 
process automation in Reposi- 
tory Manager. 

SOA Software can guarantee 
the fidelity of governance 
processes on its products, he 
said. "When governance is hand- 
ed off to another asset manage- 
ment system, we have no insight 
into what it could be doing. Cus- 
tomers could end up with holes 
in their governance process in 
they are not careful." I 
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CA targets .NET world with Plex 6.1 



BY DAVID RUBINSTEIN 

CA has taken aim at the .NET 
world with the 6.1 release of its 
Plex rapid application develop- 
ment software, with features 
that enable developers to mod- 
el packages that can be deliv- 
ered as services. 

The services generated by 
Plex 6.1 can be based on Micro- 
soft's Windows Communication 
Foundation technology, so they 
can be shared within an enter- 
prise or with outside partners, 
according to William Hunt, CA's 
principal product manager for 
Plex. By supporting WCF, appli- 
cations can also incorporate busi- 
ness processes via Windows 
Workflow Foundation. This 
gives developers the ability to 
design and generate code, as 
well as build native, services- 
based applications from within a 
single environment, Hunt said. 

The multi-platform solution, 
released in mid-December, also 
supports updates in the Java 
platform, including Java SE 6 
and Apache ANT 1.7. On the 
Microsoft side, Plex now works 
with SQL Server 2008 and Win- 



SD Times 100 
nominations 



now open 



BY DAVID RUBINSTEIN 

What's the best modeling tool 
you used this year? What's the 
best book you read? Who do 
you say was most influential 
to the development industry? 

Here's your chance to tell 
us by nominating them to the 
7th annual SD Times 100! 

From the top products to 
the most compelling individ- 
uals to the most interesting 
research projects, the SD 
Times 100 honors the best 
our industry has to offer! 

Nomination forms are 
available online at 

www.sdtimes.com/content/ 
about-sdtimeslOO.aspx, with 
a list of categories for consid- 
eration. The deadline for sub- 
mission is March 1, so get 
them in as early as you can. 

Past honor rolls have been 
dominated by products; this 
year, we're looking to bestow 
the award on researchers, 
development "rock stars" and 
all those who bring so much 
vibrancy, knowledge and in- 
sight into our profession. I 



dows Server 2008, along with 
64-bit Windows applications, 
Hunt said. He added that the 
software also works with Oracle 
llg and the IPv6 standard. 

Plex is one of three developer 
products still being developed at 



CA in its application develop- 
ment and databases division; 2E 
and Gen are the others. The 
company also still advances the 
Aion Business Rules Expert tool. 
These are remains of the devel- 
opment tools portfolio at CA, 



which acknowledged in a 2005 
interview with SD Times that 
developer tools were not "core" 
to CA's strategy. 

Hunt, though, said CA has 
"loyal, happy customers pleased 
with the direction we're going 



with developing the tools." He 
noted that all the tools con- 
tribute to the company's vision of 
enterprise IT management. 

"Application development is 
the foundation to the sky- 
scraper," he said. "It may not be 
strategic on its face, but it's very 
important to us. We have a 
large base of customers." I 
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Muglia named president of Microsoft Server Tools Business 



BY DAVID WORTHINGTON 

After spending 21 years at 
Microsoft, Bob Muglia, who 
heads up the company's Server 
and Tools Business (STB), has 
been promoted to president. 
In an e-mail sent to STB 

Aptify links SQL 

to 

life-cycle platform 

BY JEFF FEINMAN 

Aptify, a provider of business 
software and services, has added 
new Microsoft integrations to its 
application life-cycle platform 
and business application suite. 

Aptify 5.0, released in Janu- 
ary, leverages Microsoft tech- 
nologies, including SQL Server 
2008 and version 3.5 of the 
.NET framework, Aptify execu- 
tives said. Through the use of 
GUI tools and generation of user 
interface and business logic ele- 
ments, developers can create 
applications in less time than 
during traditional business appli- 
cation development, according 
to the company. Additionally, 
Aptify 5.0 uses the Ribbon navi- 
gation concept present in 
Microsoft Office 2007 to try to 
give Aptify users a familiar expe- 
rience. 

Amith Nagarajan, CEO of 
Aptify, said the software defines 
business functionality through a 
set of metadata that automati- 
cally creates business logic and 
database elements, reducing 
the amount of code required 
for applications. 

"Code can always be incorpo- 
rated in a seamless manner 
when needed, but [it] is not 
required in the vast majority of 
cases," Nagarajan said. "Deploy- 
ment of updates to applications 
is handled automatically, which 
greatly reduces the typical costs 
associated with making changes 
to existing systems. All elements 
within Aptify adhere to XML 
standards, which permits easy 
interchange of data with other 
systems within the enterprise." 

Nagarajan also said that 
upgrading enterprise business 
applications can be a complex 
and time-consuming task, but 
Aptify 5.0 eliminates this com- 
plexity because user interface 
elements and business logic 
elements are managed through 
metadata. I 



employees, CEO Steve Ballmer 
announced that Muglia was 
named president of STB. 
Muglia joins Robbie Bach, pres- 
ident of Microsoft's Entertain- 
ment and Devices unit, and 



Stephen Elop, president of 
Microsoft's Business Division, as 
one Microsoft's three presidents. 
In his e-mail, Ballmer 
praised Muglia's stewardship of 
STB over the past decade, from 



a marginal source of revenue 
into a US$13 billion business — 
approximately 20% of the com- 
pany's total revenue. 

"More than that, Bob has 
built a culture of getting things 



done and done right," Ballmer 
wrote. "He has championed 
some of our most important ini- 
tiatives and helped us successful- 
ly face some of our most impor- 
tant competitive challenges." I 
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Intersoft readies Silverlight 2 data controls 



BY DAVID WORTHINGTON 

A component maker is prepar- 
ing to release data source con- 
trols for Silverlight 2, which it 
says will allow developers to 
more easily create line-of-busi- 
ness applications by simplifying 
data binding and data retrieval 
operations. 

Intersoft Solutions will 
deliver three Silverlight data 
source controls in the next few 
months. The controls access 
data in different ways: by bind- 
ing to XML and hosted Win- 
dows Communication Founda- 
tion (WCF) services, and by 
connecting with ADO.NET 
Data Services. 

XmlDataSource is a data 
control that binds Silverlight UI 
controls to XML data files for 
read-only information display. It 
is suggested that the XML data 
files should be static, according 
to the company's blog. 

Intersoft's WCF control will 
provide more advanced func- 
tions. WcfDataSource binds UI 
controls to data sources that are 
hosted on WCF services; one or 
more services can be defined for 
a single control. The control can 
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Dating binding and retrieval operations will be performed without coding. DataPresenter displays information from the data source component. 



perform CRUD (create, read, 
update and delete) operations, 
in addition to data selection and 
insertion. It also implements 
WCF's caching, concurrency 
and conflict options, and it pro- 
vides custom data contract sur- 
rogates for metadata, the com- 
pany says. Event handlers can 
manipulate data before it reach- 
es the UI controls. 

WcfDataSource automati- 
cally discovers Silverlight ser- 



vice references, which enable 
applications to communicate 
with Web services. Conse- 
quently, developers do not need 
to recode classes and object 
definitions. 

However, Intersoft predicts 
that .NET programmers will 
opt for ADO.NET Data Ser- 
vices. ADO.NET Data Ser- 
vices, formerly code-named 
Astoria, expose data as a data 
service to be consumed by Web 



clients within corporate net- 
works and across the Internet. 

"Astoria is likely going to be 
the preferred solution for many 
.NET developers when it comes 
to Web data provider, as it 
requires very minimal efforts on 
the developers end to get it 
working and running," said Jem- 
my Haryono, vice president of 
marketing at Intersoft. "Com- 
pared to WCF, which you are 
required to provide each func- 



tion to handle each data opera- 
tion, Astoria requires none." 

An upcoming Intersoft con- 
trol called AstoriaDataSource 
connects a data-bound UI con- 
trol to an ADO.NET Data Ser- 
vice. The control performs data 
operations automatically, such 
as data selecting, data paging, 
data transactions (Insert, 
Update, Delete) and data 
manipulations (sorting, filter- 
ing), said Haryono. I 
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Artistic trainers setting the stage 



< continued from page 5 

and passion can be brought to 
agile development. A former 
agile coach with Primavera Sys- 
tems and Rally Software, Brod- 
erick went out on her own and 
founded AgileEvolution in 
2006 to offer what she calls a 
humane and logical way for 
teams and companies to deliver 
their products. 

Agile development teams call 
Hershey Pa.-based AgileEvolu- 
tion to alleviate malaise within 
their standup meetings. Broder- 
ick said that, over time, many 
meetings turn into repetitive 
updates on the teams progress 
with little energy involved. 

However, Broderick takes a 
seven-step approach to combat- 
ing what she calls "daily standup 
withdrawal." She said that a 
team should believe in self- 
management, commit to the 
goals of a sprint and realize the 
importance of communication. 
Teams should also embrace the 
fact that the order of tasks will 
change on a daily basis, have a 
leader that empowers them to 
make good decisions and 
accept accountability, and look 
back on the daily meeting to 
make sure everything is carried 
out properly. 

Additionally, "teams should 
realize the importance of mak- 
ing work visible," she said. 
"Transparency improves the 
nature of the relationship 
between the team and the rest 
of the organization, resulting in 
higher levels of trust and col- 
laboration. 

"In order for teams to truly 
collaborate, each team member 
must be free of inhibition, able 
to speak his or her mind, and 
willing to throw any idea out 
there on the table. When col- 
laboration happens, innovation, 
the creation of a new thing, is 
guaranteed. We teach a lot 
about release [by] having team 
members release into their 
edges, or their areas of discom- 
fort and apprehension." 

OUTSIDE THE COMFORT ZONE 

Smith also said that much of his 
training involves bringing peo- 
ple out of their comfort zones. 
He talked about how many pro- 
fessionals in the technology 
field are rewarded for their 
"document-driven communica- 
tion," and their strength lies in 
being able to sit at a computer 
and absorb a lot of information. 



Many jobs do not require a 
great deal of social interaction. 
Agile development, however, 
requires people to work trans- 
parently and in collaborative 
groups. 



"That is absolutely foreign to 
some people because it feels 
like they're giving up control," 
Smith said. "It's like if you're a 
golfer, and somebody tells you 
to fix your swing. It's really hard 



for a golfer to fix his swing until 
he changes his swing and hits it 
really well." 

Improvisational training 
teaches the value of surrender 
and shows professionals what 



they can get from giving up 
control. Smith tries to teach 
people to abandon their own 
agendas, judgment, control and 
anticipation, and to instead 
move the action forward, to be 
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Ken 



Joined: 2008/01/15 
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Hi guys, 

I am starting a new enterprise-grade application and 
definitely need an ORM to build my persistent data layer. 

I definitely need Forward and Reverse mapping capabilities 
and tight Visual Studio integration. My application will have 
quite heavy data load so performance is critical!!! 

Any suggestions? 






Subject: Help needed selecting an ORM! 



Posted 40 minutes ago 



Mike 



Joined: 2006/02/20 
Messages: 950 



Ken, 

I just finished a project using Telerik's OpenAccess ORM product. 
It is a very solid tool that also offers: 

• LINQ support 

• persistence ignorance and lazy loading 

• phenomenal scalability through Fetch Plans and Level 2 cache 

You should definitely check it out! 
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for improvements in agile 



accountable and to listen. His 
improvisational exercises are 
about putting people in non- 
work situations and carrying out 
tasks that would be more diffi- 
cult for a team to do than an 



individual. An example of such 
an exercise is having multiple 
people verbally write a letter 
and alternate words as they 
speak, as in "Dear... Jerry... 



hov 



.your 



Smith said the challenge of a 
simple, silly group task such as 
this is that people will anticipate 
where they want the sentence to 
go, and they will try to manipu- 
late other people to meet the 



desired end. Once that happens, 
a problem arises because some- 
one is trying to control the situa- 
tion. The goal of the exercise is 
to train people to ignore the 
desire to control and trust in 




their teamwork to obtain their 
goal, which is a key notion in 
agile and Scrum development. 

Another exercise that Smith 
does with his workshop groups 
is having everyone walk in a cir- 
cle, point to something in the 
room, and call it something oth- 
er than what it is, like calling a 
light bulb a giraffe or pointing 
to a plant and yelling out 
"nose." Smith said this exercise 
throws everyone off and gives 
them an unpleasant sensation, 
but this type of disorientation is 
natural before successfully 
completing a task. 

"For some groups that I 
work with, they're trying to fig- 
ure out what this has to do with 
their job," Smith said. "But with 
Scrum Master training, every- 
body gets exactly what this has 
to do with their job. These sim- 
ple exercises, which are not 
intimidating because they're 
games, can be applied often- 
times to what's going on with 
Scrum. Everybody's interested 
in figuring out Scrum, saying, T 
don't want to be the one who's 
held back and hanging on to old 
ideas because it's not going to 
help me.' " 

One of the more irreverent 
exercises that Broderick con- 
ducts is the "silly walk," which 
requires team members to use 
exaggerated movements that 
can sometimes resemble mon- 
keys or drunken dancers, Brod- 
erick said. This helps people 
overcome embarrassment and 
become energized. 

Broderick also has trainees 
loosen up in more convention- 
al manners with stretching and 
concentration exercises. She 
has the class bend at the waist 
and let their arms and fingers 
dangle toward the ground 
until there is tension in the 
hamstrings. Each team mem- 
ber talks about this tension 
and discusses the mental 
equivalent, which could be 
anxiety, jealousy, boredom or 
other factors. 

"My biggest concern about 
teaching Scrum is that people 
don't really understand what 
they're getting into when they 
say they want to 'do Scrum,'" 
Broderick said. "Unfortunately, 
it is seen as a project manage- 
ment framework, which it is. 
But it is far more than that. It is 
an inspect-and-adapt mecha- 
nism that will change the orga- 
nization or stretch it into 
uncomfortable territories. 

Teams need to be able to focus 
and work with the tensions in 
order to be successful." I 
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Curl taps Adobe AMF in data services kit 



BY JEFF FEINMAN 

Curl has released a data ser- 
vices kit that uses an Adobe 
binary protocol to decrease data 
transfer problems. 

Curl Data Kit Data Services 



(CDK-DS), announced in Janu- 
ary, is for enterprise developers 
building new applications that 
require a fast data connection to 
existing server infrastructure, 
according to Curl executives. 



This might include developers 
who need to bring data into 
Adobe Flash or Flex applica- 
tions, or developers upgrading 
existing Curl applications that 
require reliable, high-speed data 



connectivity. 

The product has a set of APIs 
that lets users interface to 
Adobe s Action Message Format, 
a binary protocol for exchanging 
data between a rich Internet 
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application client and back-end 
server platforms. AMF can be 
used on Adobe s Flex LiveCycle 
Data Services and with Adobes 
BlazeDS open-source remoting 
and messaging technology. As a 
result, the data services kit offers 
all the remoting and Web mes- 
saging services available in 
BlazeDS, including remote pro- 
cedure calls and publish/sub- 
scribe messaging. 

Curl executives said AMF 
will bring faster data transfer 
time to the Curl platform. "If 
you're doing data intensive 
applications, you need a binary 
data streaming protocol like 
this if you're going to get any 
kind of reasonable perfor- 
mance," said Richard Treadway, 
Curl's vice president of market- 
ing and product strategy. 

Treadway said that CDK-DS 
increases software developers' 
overall speed and efficiency. 

"Curl in general offers a very 
rich environment for building 
graphic user interfaces, so there's 
certainly a programmer produc- 
tivity message with Curl," he 
said. "I think this component 
augments that in the area of cre- 
ating an end-to-end solution." I 

Zenexis releases 
SilverlightWPF 
interface suite 

BY DAVID WORTHINGTON 

A component supplier has devel- 
oped customizable Silverlight 
controls, cross-compatible with 
Windows Presentation Founda- 
tion (WPF). 

Zenexis released last month 
its ZenEssential components 
suite, an assortment of 17 con- 
trols designed for Silverlight 2 
and WPF 3.5. The controls are 
compatible with Microsoft 
Expression Blend for skinning 
and styling, the company says. 

The suite provides API and 
design consistency among the 
controls, as well as a contain- 
ment architecture that allows 
developers to nest controls 
within one another. There is 
also support for localization. 

Controls in the suite support 
data binding and data virtual- 
ization. Zenexis supports the 
data-binding model that is built 
into Silverlight and WPF, Tom 
Grandgent, lead software archi- 
tect at Zenexis, said. "Virtual- 
ization is supported by some 
controls where it makes sense, 
such as in a treeview control," 
he added. I 
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EventSentry watches servers for all 



BY ALEX HANDY 

Ingmar Koecher founded 
EventSentry in 2002 because 
he couldn't find the software he 
needed to monitor his servers. 
Koecher, an Austrian-born sys- 
tems administrator, had a ret- 
inue of scripts designed to let 
him know when there was serv- 
er trouble in his stable, but 
those scripts turned into his day 
job. Now known as EventSen- 
try 2.9, Koecher's event moni- 
toring software brings compre- 
hensive controls over alarms 
and alerts for Windows admin- 
istrators and developers. 

Koecher said that the prima- 
ry draw for EventSentry has 
always been its focus and a low 
price point. At US$85 a year, 
EventSentry can monitor 
almost every log and event file 
in a Windows server, and can 
run alerts based on variables 
and conditions within those 
files, he claims. 

"One of the advantages of 
EventSentry is that it's very ver- 
satile. That gives it a lot of 
uses," said Koecher. 

"You can monitor event logs 
and consolidate them. You can 
send them via e-mail or write 
them to a database. Or let's say a 
Web service goes down, then 
the developers can get an e- 
mail. EventSentry allows you to 
create complex rules so you can 
have multiple people on a team 
receive alerts. A sysadmin might 
want some events, while devel- 
opers might want to get others. 
Every time there's a seg fault, 
there's an event log generated. 
We probably have one of the 
more complex rule sets out 
there. You can restrict e-mails by 
time. You can say, I want an e- 
mail during the day, I want a 
page at night.' " 

Koecher said that version 2.9 
can monitor standard log files for 
anything running under Win- 
dows; this capability is now avail- 
able for Linux as well. While 
Windows is the current focus of 
the product, Linux development 
will increase in the future. 

"We have service monitor- 
ing, disk space monitoring and 
event log backups," said Koech- 
er. "Using NTP (network time 
protocol), we can offer perfor- 
mance monitoring. Windows 
includes the performance mon- 
itor that gives you stats on 
everything from memory usage 
and processes to SQLServer 
info. All that stuff is available 



through the Windows perfor- 
mance monitor, and you can 
monitor these counters and you 
can either get alerts on strict 
data, or you can take averages. 
"You can say, 'Don't e-mail 



me if it goes over 55% usage for 
only five minutes.' You can con- 
solidate counter data into the 
database for charts. You don't 
have to have performance 
counters set up all the time. 



Just do it once an hour." 

Koecher admits that learning 
EventSentry can take a few 
hours due to the depth of 
options available for triggering 
event notifications. But he said 



that software developers have 
shown interest in this wide 
range of configurability. 

That depth is also in its 
reporting. Koecher said that the 
information EventSentry pushes 
into a database for storing 
records on the performance and 
reliability of servers can then be 
output in compliance reports. I 
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Perforce brings integration previews to SCM product 



BY JEFF FEINMAN 

Perforce Software has added 
improved integration manage- 
ment and server discovery to its 
namesake software configura- 
tion management product. 

Perforce 2008.2, released in 
January, allows developers to 
preview the effects of integrat- 
ing changes between branches 
by using a side-by-side display 
of branches and color coding 
for individual files, according to 
the company. There is a new 
rollback feature that allows file 
revisions and integrations to be 
undone. 

John Walker, senior market- 
ing manager of Perforce, said 
the new version brings 
improved visual reporting. 

"These days, with people 
doing agile development, they 
have multiple branches and can 
really take advantage of our 
strong integration algorithms," 

Infragistics' 
Quince offers III 
pattern catalogue 

BY DAVID WORTHINGTON 

Component maker Infragistics 
is branching out into the end- 
user experience market with a 
Silverlight-powered online cat- 
alogue of UI patterns, called 
Quince. 

Quince, expected to be 
launched as a free public 
resource this month, has an ini- 
tial set of 90 patterns that are 
based on common UI interac- 
tions, said Jason Beres, director 
of product management. 

The patterns can be filtered 
by keywords or by meta tags 
around major categories of tasks. 

Each pattern has resources 
for developers to learn more 
about how to implement it, 
and Infragistics says that com- 
ments and suggestions con- 
tributed by the Quince com- 
munity will also become a 
resource, Beres stated. 

"Infragistics has been in the 
UI component business for 20 
years. Over time, we became 
experts in how to build user 
interfaces and what goes into a 
UI — what those patterns are, 
and how people can use them," 
Beres said. 

Developers may want their 
applications to mimic Microsoft 
Outlook's interface; Quince 
helps them determine how to 
implement that, he explained. I 



Walker said. "What we have 
now is the ability to preview the 
integration between branches. I 
can better understand what 
kind of work I'll have when it 
comes to implementing an inte- 
gration, and if there are any 



particular errors that will pre- 
vent me from accomplishing 
the integration, this tool will 
report that as well." 

Walker added that Perforce 
has tried to increase the prod- 
uct's scalability for enterprise 



installations with this release. 
Some organizations using Per- 
force's SCM product have well 
over 1,000 users working on a 
Perforce server instance con- 
currently, he said. 

Another new feature is auto- 



matic server discovery, which 
lets users select the servers they 
want to connect to. Previously, 
users had to know the IP 
address and port number of the 
server they wanted to link with, 
according to the company. I 
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Lighthouse 5.0 links PPM with life-cycle management 



BY JEFF FEINMAN 

Artifact Software, an online 
software project specialist, has 
added project and portfolio 
management (PPM) capabili- 
ties to its software-as-a-service 



project management product. 

Lighthouse 5.0 now has PPM 
capabilities integrated with the 
products life-cycle management 
features. Lighthouse offers pro- 
fessionals working on software 



projects real-time traceability, 
project metrics and collabora- 
tion capabilities, according to 
Artifact executives. 

Mark Wesker, president and 
CEO of Artifact, called Light- 



house a "Salesforce.com for 
software projects," as it is an all- 
in-one system that can manage 
project artifacts, such as 
requirements, changes and test 
cases, along with project plans, 
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Web applications, while significantly cutting 
their development time. RadControls for ASP.NET 
includes: RadEditor, RadTabstrip, Radlnput, 
RadCalendar, RadUpload, RadWindow, RadAjax, 
RadGrid, RadCombobox, RadMenu, RadSpell, 
RadChart, RadTreeview and more. 
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resources and schedules. 

"A lot of software project 
teams are forced to have one 
tool for project planning, anoth- 
er tool for requirements, anoth- 
er tool for defects, and what you 
get is this kind of disconnected 
patchwork quilt of tools," 
Wesker said in talking about oth- 
er companies' products. "You 
can't bring all your project data 
together in one system, and 
that's really our key message." 

Lighthouse can now use 
resource tracking to plan pro- 
jects. Lighthouse has always 
been capable of importing 
Microsoft's Project software for 
project management, but 
Wesker said that doing so is no 
longer necessary in the new 
version. It is still possible to 
import Microsoft Project, but 
project plans can now be creat- 
ed directly in Lighthouse. 

When asked the main bene- 
fit that software developers can 
get from the combination of 
PPM with life-cycle manage- 
ment, Wesker said that by hav- 
ing all the information in one 
system, it is easier for develop- 
ers to understand the traceabil- 
ity of a particular item. 

"Perhaps I'm working on a 
bug," he said. "Well, what test 
case produced that bug? What 
requirement was being tested 
when that bug occurred? 
Developers are given the ability 
to really see the history of items 
and what happens with them." 

Lighthouse 5.0's linking 
capabilities and ability to con- 
vert requirements into test cas- 
es make it easier for developers 
to do their job, Wesker said. 
Failed test cases are converted 
into defects, so when a user is 
presented with a defect, he or 
she will see the test case that 
was run and the requirement 
that was being tested. Software 
teams can collaborate in Light- 
house 5.0 to fix defects. 

Wesker said that software 
project team members mostly 
spend a lot of time "working in 
the dark" because their data is 
all over the place. "Shouldn't all 
your project data be in one 
place?" he said. "Should it real- 
ly be in Word documents, Excel 
spreadsheets, e-mail inboxes, 
defect tracking systems? How 
do we correlate all that infor- 
mation when it's all over the 
place? Lighthouse brings a 
pretty simple benefit. It gives 
all that data in one system." I 
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Vertebra gives clouds backbone 



< continued from page 1 

of loading state and information 
into an enterprise service bus or 
messaging queue. Instead, each 
machine knows which other 
machine it needs to communi- 
cate with, and Vertebra handles 
the transportation issues with 
XMPR That means that service 
buses don't get jammed up when 
the network goes down, result- 
ing in what Vantuyl says is a more 
fault-tolerant system. 

"The whole assumption that 
every [server] is always working 
is horrifying. The scariest thing 
about Web services is what do 
you do when the network is 
down?" said Vantuyl. 

His answer is that Vertebra 
makes sure every endpoint in 
the cloud can at least pause 
until things come back online. 

That's quite different from 
typical cloud thinking, where vir- 
tualized instances of machines 
run applications alongside other 
virtualized machines running 
load balancers, Web servers and 
databases. 

Vantuyl said the Engine 
Yard team first wrote Vertebra, 
then wrote management soft- 
ware for running a cloud inside. 
That software includes role- 
based security, a workflow and 
horizontally scalable load man- 
agement. 

NOT YOUR TYPICAL ESB 

At the heart of Vertebra is 
XMPP, a protocol more typically 
associated with the instant-mes- 
saging service Jabber. Indeed, 
Engine Yard currently uses ejab- 
berd, a Jabber server running in 
Erlang, at its centerpiece. 

Jabber, said Vantuyl, is actu- 
ally "a distributed, federated 
XML switch." 

Tom Mornini, co-founder 
and CTO of Engine Yard, said 
that "XMPP provides transport- 
level connections. That means 
it needs two ports you have to 
open on a firewall if you want to 
communicate inside and out- 
side of an organization. Even 
better is when the servers are 
doing server-to-server connec- 
tions; it's DNS secured through 
callbacks." 

As a result, Vertebra simpli- 
fies the connecting of clouds by 
tunneling everything that goes 
between them through this pro- 
tocol. The management tools, 
rather than pass along informa- 
tion about where each process 
lives, simply stamp each opera- 
tion with a resource that can be 



traced back to a hierarchical list. 
Thus, Vantuyl said, when a 
process needs to be killed, the 
management system needs only 
know the role-based tags associ- 
ated with the process rather 
than the name and IP address 



of the actual machine that is 
misbehaving. 

Jay Lyman, open-source 
analyst at the 451 Group, said 
that the use of XMPP surprised 
his team. "By combining this 
machine-to-machine communi- 



cation with [Vertebra's] security 
and agent discovery framework, 
it's an innovative and interest- 
ing approach to deployment. 

"It's very unique. This goes 
along with Ruby-on- Rails up- 
take," he said, inferring that 



Engine Yard is working with 
technology not yet fully accepted 
by enterprises. "I think it's a very 
hot project, and it's definitely 
drawing in a lot of developers 
and enterprise developers, but at 
the same time, the real large- 
scale enterprise Ruby deploy- 
ments ... they're coming, but 
they're still not there." I 
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SCO to sell UnixWare, mobile units 



< continued from page 1 

SCO's assets will have a tough 
time coming up with the money. 

"A lot of companies are try- 
ing to figure out how to keep 
their doors open, so money to do 
purchases is going to be incredi- 
bly hard to come by" he said. 
"They couldn't have picked an 
uglier time, and I'm not con- 
vinced it will work. They might 
find buyers, they're just not 
going to get much money for it." 

This is SCO's second Chapter 



11 reorganization filing. In Feb- 
ruary 2008, SCO proposed a 
deal that would have had New 
York private equity firm Stephen 
Norris Capital Partners and a 
group of other investors come in 
with up to US$100 million. 
However, the proposal was 
abandoned two months later. 

Hunsaker said separating 
the UnixWare unit from the 
OpenServer line should help 
foster interest in an auction. 

"We felt that was the stick- 



ing point with the previous 
deals," he said. "By removing 
[UnixWare] and not selling it as 
part of the business, we feel 
we'll be able to move forward in 
a clean approach with the Open 
Server business. The last few 
years of trying to sell these 
products under the shadow of 
the legal battles have been very 
hard. We need to separate the 
products business from the 
legal initiatives." 

If SCO's assets are not sold, 



SCO will continue to sell 
OpenServer and its mobile 
products in what Hunsaker 
called a "bootstrap plan." 

SCO was originally due to 
file its Chapter 11 reorganiza- 
tion plan at the end of 2008, but 
the company requested an 
extension, asking for a deadline 
of Jan. 16. Hunsaker attributed 
this to SCO needing a few extra 
days to work through the disclo- 
sure statements and reorganiza- 
tion plan. 



SCO has had many legal bat- 
tles over the years, most notably 
with Novell over the rightful 
ownership of Unix. In August 
2007, a U.S. District Court 
judge ruled that Novell had 
retained the copyright to Unix. 
In November 2008, a federal 
court judge issued a final judg- 
ment in the case, granting Nov- 
ell an award of $2.5 million, 
which was increased by 
$918,122, plus $489 per day 
after Aug. 29, 2008. I 



Borland's health at issue 



< continued from page 1 

to weather the storm, and they 
think they're in a better posi- 
tion to be able to return back to 
profit. But like anything, the 
proof is in the pudding. To a 
certain extent, they've talked 
about returning to profit quite a 
few times, and it still hasn't 
happened." 

Meanwhile, Peter Morowski, 
senior vice president of research 
and development, will also be 
leaving Borland to pursue other 
opportunities, according to the 
company. 

Borland further announced 
that it will reduce its workforce 
by nearly 15%, expecting to lay 
off approximately 130 employ- 



ees. Borland executives said the 
majority of the company's 
planned layoffs are part of a plan 
to restructure the company's 
marketing strategy and to create 
a global sales team. These work- 
force reductions are expected to 
be completed by the end of the 
first quarter 2009, with annual- 
ized savings of between US$12 
million and $14 million, accord- 
ing to Borland executives. 

Borland reported preliminary 
results for the fourth quarter of 
2008, expecting to report total 
revenue in the range of $38.5 
million to $40 million. That total 
would be significantly lower than 
the company's fourth quarter 
2007 revenues of $61.5 million, 



and a drop from its total revenue 
of $44.3 million in the third 
quarter of 2008. 

Prusch joined Borland in 
November 2006 as CFO. Prior 
to that, he held executive posi- 
tions with a number of compa- 
nies, including Gateway, Iden- 
tix, Intuit, Koch Industries and 
PepsiCo. 

"We have the products, tal- 
ent and financial footing to 
withstand near-term economic 
uncertainties and continue the 
strategy we've outlined to 
investors," Prusch said. "I'm 
excited to lead Borland 
through its transformation to 
an innovative leader in the 
ALM market." I 



Nielsen rejoins Maritz 
as COO at VMware 



BY JEFF FEINMAN 

VMware has brought in former 
Borland Software president and 
CEO Tod Nielsen to serve as 
chief operating officer. 

Nielsen, 43, will work with 
Paul Maritz, VM ware's presi- 
dent and CEO, to help VMware 
battle Microsoft and its Hyper- 
V hypervisor in the virtualiza- 
tion market. Nielsen and 
Maritz worked together in the 
past at Microsoft. 

"In this newly created role, 
Tod brings unique skills and 
capabilities that will help us 
improve our operational focus 
and enhance our execution 
across all areas of the business," 
Maritz said in a statement. 
"With Tod on board, I will be 
able to devote more of my time 
to the product strategy and 



development, while Tod focuses 
more on business, marketing 
and operations. Having worked 
closely with Tod in the past, I 
know that we will work effec- 
tively together and complement 
each other." 

Named to the position on 
Jan. 6, Nielsen joins VMware 
after the company parted ways 
with cofounders Diane Greene 
and Mendel Rosenblum in the 
late 2008. Richard Sarwal, exec- 
utive vice president of research 
and development, and Paul 
Chan, vice president of product 
development, also resigned, 
giving the impression that some 
high-level figures at the compa- 
ny were jumping ship. 

However, Charles King, 
president and principal analyst 
with Pund-IT, said that 




Tod Nielsen brings technical and 
sales experience to VMware. 

Nielsen's marketing and leader- 
ship experience will benefit 
VMware greatly. 

"On first glance, he looks 
like he'll be a terrific fit over 
there," King said. 

VMware has been criticized 
for its marketing efforts in 
recent months, with analysts 
saying the company has great 
technology but only mediocre 
marketing ability. King said 
Nielsen's previous experience in 
marketing should create syner- 
gies between the two. I 



Windows 7, Server 
2008 R2 head into beta 



BY DAVID WORTHINGTON 

Microsoft CEO Steve Ballmer 
kicked off the 2009 Interna- 
tional Consumer Electronics 
Show (CES) on Jan. 7 by 
announcing the availability of 
pre-release versions of Win- 
dows 7 and Windows Server 
2008 R2. 

Windows 7s timely release 
schedule should come as no 
surprise: The OS was already 
API complete at Microsoft's 
Professional Developer's Con- 
ference in October. 

Microsoft has implemented 
several user interface changes 
in Windows 7, including uni- 
form use of its "Ribbon" con- 
struct and redesigned inter- 
faces for common tasks. It also 
introduces an overhauled 
taskbar, called Superbar. 

The Windows 7 Superbar 
provides new capabilities for 
launching and switching among 
applications and documents. 
Applications may be pinned to 
the taskbar and will indicate 
when they have been loaded. 

A feature that Microsoft 
calls Peek changes the focus of 
Windows in a manner similar to 
Mac OS X's Expose; multi- 
touch gesture support also 
helps users navigate between 
windows. 

The overall hardware re- 
quirements for Windows 7 will 
be similar to Windows Vista, 
the company said. The Win- 
dows 7 beta was issued to 
testers at CES and became gen- 
erally available on Jan. 9. 

"I asked about upgrade 
plans, and only 10% of organi- 
zations have deployed Vista as 
their major OS," said Laura 



DiDio, a principal analyst at 
Information Technology Intel- 
ligence Corp. "That doesn't 
mean a lot don't have it in pilot 
networks and test implementa- 
tions. What we saw from that is 
[what] most customers basical- 
ly said is, 'We are going to skip 
Vista and go directly to Win- 
dows 7.' Microsoft has a very 
vested interest in getting this 
thing out on time and getting it 
right." 

She added that Windows XP 
may also be getting too long in 
the tooth for enterprises that 
require support for composite 
applications, highly parallel 
applications and cloud-based 
services. "Customers have been 
asking for longer lasting, more 
scalable and [more] secure 
operating systems for years, and 
vendors, including Microsoft, 
responded. But Windows XP 
may not be powerful enough to 
run new applications," she 
explained. 

Microsoft has been develop- 
ing runtimes that will permit 
Windows to accommodate par- 
allel applications. It is also 
developing operating system 
technologies for concurrent 
computing environments. 

In his keynote, Ballmer said 
that the first beta of Windows 
Server 2008 R2 would also be 
ready for download on Jan. 9. 
It was previously released to 
MSDN and TechNet sub- 
scribers. The beta extends 
hardware support, improves 
power management, includes 
live migration of Hyper-V vir- 
tual machines and has more 
advanced support for remote 
desktops. I 



Breadth, Depth infraest.** 
And the WOW factor! 





High Performance 

Ul COMPONENTS 

Superior User Experience 



learn more at: infragistics.com 

Infragistics Sales 800 231 8588 Infragistics Europe Sales +44 (0) 800 298 9055 



NetAdvantage' 



Four Platforms. One Package. 



grids charting 



scheduling navigation 



gauges 



editors more! 






WILL YOUR SOA BE RESTING IN PIECES? 



As SOA gains traction and services become more 
pervasive, do you have a plan for dealing with new 
complexity? 



Stay out of the SOA graveyard with TIBCO 
Active Matrix®. 



KB T I BCO* 



The Power of Now 



® 



Software infrastructure for rapid change. 

3,000+ customers • 20 years of experience • Nasdaq: TIBX 



Learn more at www.tibco.com or call 1-800-420-8450 

©2009, TIBCO Software Inc. All rights reserved. 



www.sdtimes.com 



. Software Development Times . February 1 r 2009 



SPECIAL REPORT 



29 



Shap 
With 




Small projects that show big returns will drive adoption 




In these uncertain economic 
times, IT budgets are tightening 
and service oriented architec- 
ture projects are at risk of flat 
lining. One of the keys to sustain- 
ing long-term SOA buy-in is implement- 
ing projects incrementally ensuring suc- 
cess while minimizing organizational 
change — and generating revenue to 
boot. 

Knowing how to successfully imple- 
ment SOA requires an understanding of 
why some projects have failed. SOA has 
significant organizational change implica- 



tions, and overly ambitious projects can 
be unsustainable due to high upfront 
costs and low initial return on investment. 

"SOA is not just a technology change, 
it is something that needs to be dealt 
with like any other business change," 
said WS02 CTO Paul Fremantle. 

SOA challenges organizations and 
organizational funding models, he 
explained. "People in the organization 
feel threatened by change, and compa- 
nies have taken on SOA without realiz- 
ing there would be resistance." 

Many organizations like to keep their 



silos clean and push cost and complexity 
onto other groups, said Miko Matsumu- 
ra, deputy CTO at Software AG. "For 
every silo, there is a tribe with its own 
political interest to horde things." 

One of the principles of SOA is soft- 
ware reuse, and organizations benefit 
through increased agility and cost sav- 
ings when there is more sharing of 
resources, Matsumura said. 

"The question is translating what 
enterprises want into the behavior of an 
organization and individuals," he said. 
"Tribes act in their own self interests, 



and the value of SOA can quickly fall 
way by the wayside." 

Matsumura suggested that organiza- 
tions connect behavior to motivational 
drivers such as job reviews, bonuses and 
other compensation. "Organizations 
should structure incentives programs 
and link them to best practices behavior," 
he said. "Without discipline, air goes out 
of the tires. When the kids fight, you've 
got to call dad. Executives should be 
engaged at a reasonably high level." 

Specifically, C-level executives are 
continued on page 30 ► 
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needed to sustain the effort, Matsumu- 
ra said, explaining that it is because 
those executives witness the cost of the 
bickering. 

"There is a natural alliance between 
architects and executives: The architect 
sees the big picture, and the C-level 
pays for the big picture," he said. He 
added that executives also need to have 
a clear understanding of the implica- 
tions of SO A. 

And indeed that seems to be the 
trend. Business leaders want to get 
involved in SOA in a variety of ways, said 
Sandy Carter, IBM's vice president of 
SOA and WebSphere strategy. "It is a 
best practice to have an executive spon- 
sor that has business knowledge or acu- 
men to focus on how SOA can bring val- 
ue to the business." 

The best way to sell an executive is to 
start out with well-defined projects that 
have well-defined ROIs, such as replac- 
ing error-prone or complex processes, 
said Fremantle. 

"One of our customers put in place 
SOA because they saw instant cost sav- 
ings of US$250,000 per year, and the 
project cost just $50,000," he said. "They 
picked the right project where ROI paid 
off quickly, and no department s budget 




or people were threatened." 

However, developers should take 
care not to over-promise on what they 
can deliver. "Last year's theme was, 
'Let's seduce the business unit and tell 
them incredible things like that we will 
be developing applications within 
hours.' That was a lot of promises and 
smoke and mirrors," said Matsumura, 
who is not alone in his assessment. 

"The industry took the SOA concept 
and turned it into more than it was; the 
acronym became over-hyped a bit," said 
Rourke McNamara, director of product 
marketing at TIBCO. 



'It is a best practice to have 
an executive sponsor that has 
business knowledge or acumen 
to focus on how SOA can bring 
value to the business/ 

—Sandy Carter, vice president of 
SOA and WebSphere strategy at IBM 



BUYING INTO SOA DURING A DOWNTURN 

Past should not be prologue: ROI is now 
crucial for funding SOA initiatives. "The 
funding philosophy has changed [for] 
2009," said Jerry Smith, CTO of Sym- 
phony Services. 

In 2008, programming managers 
could make the case that SOA was an 
investment that would ultimately 
decrease maintenance and long-term 
costs while increasing agility and 
usability, he explained. "CFOs won't 
make that investment right now." 

"Folks that were heading down the 



SOA path already are continuing to 
invest, but there has been a dramatic 
drop in the number of people starting 
SOA in 2009," McNamara said, citing 
recent surveys by Evans Data Corp. 
But developers can still make the case 
for investment, Smith believes. 

Tying SOA efforts to margins, rev- 
enue and customer satisfaction is what 
is resonating with CFOs today, Smith 
said. If developers pick services that 
clients will subscribe to and pay for, 
they will have an easy ROI proof point, 
he explained. Services that take costs 
out are also low-hanging fruit. "If 
developers can use SOA projects to 
keep revenue flat, they will still be 
ahead of the game." 

Developers must deliver great things 
with small means, advised McNamara. 
"Do that a few times and imagine what 
you could get out of a much larger 
investment." 

Another argument for continuing 
project funding is customer satisfac- 
tion, Smith said. "CFOs are afraid of 
losing revenue," and any customer-sat- 
isfaction survey that implies 12-to-18 
months of diminishing revenue will be 
taken seriously, he explained. "From a 
sales and marketing perspective, it is, 
continued on page 31 ► 
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will drive SOA in 2009 



< continued from page 30 

'If we don't do this, we'll lose our com- 
petitive edge in the marketplace.'" 

"No one will be building applica- 
tions from the ground up without reuse 
10 years from now," said McNamara. 
Programmers should be looking at a 
catalogue of services before they 
build something, he explained. The 
automotive industry gained efficiency a 
decade ago when it began reusing parts 
from catalogues instead of designing 
and ordering new ones, he said. "You 
don't need 10,000 different screws in a 
single car." 

Businesses already measure revenue 
per employee, and they should now be 
concerned with revenue per service, 
Smith said. "Show that there is future 
value for the company based on a sus- 
tainable SOA innovation model. It is 
easier to walk to the table with that 
research." 

While ROI is a key factor, people 
need to feel that they are benefiting. 
Otherwise, ROI means nothing, 
observed MuleSource CTO and co- 
founder Ross Mason. "End users need 
demonstrated value." 

BABY STEPS 

Developers can build sustaining SOA 
and get to scale by following a pragmat- 
ic maturity model that has well-formu- 
lated and identified projects supporting 
a business need. Then they should 
show the results, said Tim Hall, direc- 
tor of Hewlett-Packard's SOA Center 
products. "It has a viral impact when 
you approach from that perspective 
rather than an ivory-tower type of 
approach." 

Picking projects carefully also bene- 
fits long-term success. From an organi- 
zational perspective, SOA should be a 
step-by-step approach where success is 
documented at each stage, said IBM's 
Carter. "It can be demonstrated across 
one group to the next project that this is 
the successful way to implement." 

"One thing that you can do is to have 
the person who did that project become 
an evangelist for future projects," said 
WS02's Fremantle. Successful teams 
can help mentor other parts of 




the organization, he added, noting that 
SOA cannot be mandated. 

Top-down approaches driven by 
architects without developer buy-in 
end up failing, said Fremantle. "When 
SOA hits developers, they think, 'What 
does this mean? How do I change the 
way I code?'" he said. "Many failed 
projects have been done in a waterfall- 
like way." 

The top-down approach is great "for 
redoing a project you have done before, 
but if you are doing something new and 
people aren't up to speed, there is a sig- 
nificant challenge," Fremantle said. The 
project structure did not allow develop- 
ers to take advantage of learning from 
mistakes, he noted. 

"Successful projects I have seen have 
been bottom up," he observed, noting 
that ROIs are also hard to achieve if you 
start top down due to heavy upfront 
costs. "Those customers don't meet ROI 
[and] put organization changes in place, 
and people feel threatened. You can see 
how it quickly spirals out of control." 

CONTRIBUTIONS FOR SUCCESSFUL SOA 

As projects grow, governance comes 
into play, Fremantle said, adding that 
governance does not always have to be 
implemented in a "heavyweight way." 
Companies should have a simple 
way for every developer to share what 
they are doing in a SOA, and to com- 
municate with other people about 
those services, whether it is as simple 
as a wiki or a full-blown service 
registry, he said. 

The second thing to do is 

to have some 

kind of quality 



metric for each service, said Fremantle. 
Each service would have a simple 
checklist of interoperability, support 
and testing information, he noted. 

"The more quality measurements 
that you have in place from day one, the 
more developers trust that the services 
that are being built are resilient and 
useful," said Fremantle. Automating 
complexity and policy enforcement 
should come as a second step, he said. 

"SOA governance is one of the key 
things about adopting this type of archi- 
tecture," said HP's Hall. Governance 
lets organizations set goals and objec- 
tives, in addition to helping stake- 



large vendor from start to finish, and 
[they] handed over the reins of their 
software systems." 

IBM's Carter also advises against 
overly ambitious SOA implementations. 
"SOA is an evolutionary, not revolution- 
ary, journey," she said. "In 2005, cus- 
tomers had the notion of a 'big bang' — 
that effectively all they had to do was to 
get an ESB (enterprise service bus) and 
repository in place. There are more 
business-focused deployments now." 

Carter offered the financial industry 
as an example where SOA is a driver to 
help businesses understand how to 
reuse parts of processes when they 
experience mergers and acquisitions. 
For those specific objectives, she said 
that SOA provides the underpinnings 
of a dynamic architecture that is more 
responsive to change. 

IBM itself is a believer in walking 
before it can run, she said. Big Blue tar- 
geted its supply chain with a SOA 
engagement. "[It was] a small, incre- 
mental project helped the competitive- 
ness of IBM," she said. 

When developers do not start off 
small, they may fail to achieve anything. 
"People who think they'd solve SOA 
transformation by dropping [an] ESB 
into an environment will end up in the 
trough of disillusionment and be fairly 
unhappy," said TIBCO's McNamara. 
The successful SOA implementers are 
not the ones that started out and said, 
"Dump everything and do it all differ- 




'The more quality measurements 
that you have in place from day one, 
the more developers trust that the 
services that are being built are 
resilient and useful. ' 

-Paul Fremantle, CTO of WS02 




holders collaborate and coordinate 
activities, he said. Policies provide 
automation and compliance to best 
practices regardless of cultural issues, 
he added. 

Registries are expensive, but they 
add value by preventing conflicting ser- 
vices, said MuleSource's Mason. "The 
industry needs to change. Things have 
been prohibitive to the masses to 
hold onto SOA without spending 
lots of cash. In this climate, that is 
going to fly even less," he opined. 
MuleSource develops an open- 
source registry called Galaxy. 
"Big bang" approaches, 
where companies implemented 
SOA top down, were false starts that 
individual companies could not take on, 
Mason said. "Companies needed a 



ently," he added. 

Organizations need to rationalize 
SOA, advised Software AG's Matsumu- 
ra. "There is no better time to rational- 
ize than during the downturn." Target- 
ed SOA implementations can help 
reduce operational costs and help align 
IT infrastructure to the needs of the 
business, he explained. 

Aligning IT to the needs of the orga- 
nization will help alleviate some of the 
frustration business users have with the 
time that it takes IT to deliver new 
functionality, said McNamara. "In 
order to do new things, business users 
must wait 12 to 18 months. By moving 
to this approach . . . companies are able 
to deliver requirements and applica- 
tions that businesses are asking for, sig- 
nificantly faster." I 
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FROM THE EDITORS 

Darl McBush 

As the SCO Group debacle continues to unfold, we can't help but 
think that CEO Darl McBride and now former-U.S. President 
George W. Bush have a lot in common. 

Both went to war based on bad information. For Bush, it was the nev- 
er-located "weapons of mass destruction" he believed Iraq President 
Saddam Hussein (now executed) was harboring. For McBride, it was the 
never-proven "Unix source code" that he believed IBM and others 
improperly used in their Linux distributions. 

As their respective battles raged on, both tried to strong-arm support. 
Bush used the leverage of the American presidency to build an alliance 
of countries willing to send troops into the hot zones. McBride was even 
less subtle, foisting "SCOsource" licenses on Linux users to protect 
themselves from SCO's legal missiles. 

Meanwhile, both men were losing their personal wars of public opin- 
ion at home. Bush's approval rating fell to one of the lowest of any pres- 
ident in history. McBride was made a pariah in the software industry. 
Both, though, kept pressing onward. 

Now both have fallen into irrelevance, as Bush departed the White 
House for his ranch in Crawford, Texas, and McBride leads the auction 
of SCO's only viable assets: its mobility software. 

But here's where their paths part. Bush will go back to clearing brush 
from his land, rarely to be seen again, but McBride still will be hanging 
around, as SCO holds onto its UnixWare line for as long as it takes to 
resolve its lawsuits against IBM, Novell and others. 

With court ruling after court ruling going against SCO, you would 
think the company would admit defeat and try to move forward with the 
mobile division. That's what it looked like it would do after a court ruling 
declared Unix the intellectual property of Novell, not SCO, and ordered 
SCO to pay Novell US$2.5 million plus a per-day penalty. 

Apparently, SCO can't make that payment and still fight the fight, so 
the company has decided to auction off the only piece of its business that 
had any future. 

So what's left? A shrinking share in the shrinking Unix market; SCO's 
reported earnings have declined steadily in the years since their legal 
fight began. That's it. 

SCO has done all the damage it could do to the Linux community and 
those who use it with only good intentions. Now, with depleted ammuni- 
tion, McBride and the company are mere empty shells. So McBride should 
take his final cue from Bush and, like the former president, just go away. 

Vertebra shows evolution in clouds 

It's still very early going, but Engine Yard seems to be on the path to bring 
cloud computing out of its formative stage. The startup company has 
taken on the monumental task of creating a cloud-neutral connection 
infrastructure for securely tying internal and external clouds together. 

Vertebra is still very young, but it's already evident that this is not your 
father's SOA architecture. Vertebra is based on some wildly different 
principles. Chief among these is the use of XMPP as the primary trans- 
port protocol between clouds. 

At first, this would seem silly: XMPP is primarily used for Jabber, the 
instant-messaging protocol behind Google Talk. But upon closer inspec- 
tion, XMPP appears to be a much better choice than dealing with yet 
another server-tied bus. XMPP is XML based, has intrinsic hierarchical 
support, and is an open standard. What the engineers at Engine Yard are 
making here is the scaffolding that needs to support cloud computing, 
especially if your cloud is expected to be one of many other clouds. 

The Engine Yard folks asked all the right questions when they started 
work on Vertebra. Perhaps the most important of those questions was, 
"Why are applications architected for the cloud being built in exactly the 
same way as normal data center applications?" The answer to that question, 
as we'll probably all learn in the coming years, is: they shouldn't be. I 



Sometimes, slower is better 



Michael Rowley 



New technology for simplifying 
development is always good, right? 
New APIs and servers just make it easi- 
er to develop SOA applications, right? 
And, of course, developers have all the 
time they need to adjust to the big 
changes that SOA development imposes 
on them. 

Of course, this isn't true. 
With any technological change 
as important — and benefi- 
cial — as the shift to SOA, it 
takes time for developers and 
businesses to absorb the 
important standards, to imple- 
ment them in real applications 
and to get comfortable with 
the impact of SOA on the 
overall development environ- 
ment. In short, it is important 
for vendors to release technology on a 
schedule that makes it possible for users 
to consume the technology, and to sup- 
port it in ways that allow developers and 
businesses to recoup their investments in 
those products. 

Recent announcements from Micro- 
soft got me thinking about the tension 
between a vendors desire to create new 
development technology and the devel- 
oper's desire for predictability in the 
pace of change for the technologies they 
use to accomplish their work. 




Microsoft will soon be releasing 
Workflow Foundation (WF) 4.0, which 
will have some big changes from previ- 
ous versions, primarily for the purpose of 
simplifying development. There will now 
be a flowchart workflow style, which will 
join the sequential and state machine 
workflow styles that already exist. 

WF will be integrated 
with the Windows Communi- 
cation Framework, and 
developers will be able to 
deploy the resulting Web-ser- 
vice enabled workflows to the 
"Dublin" application server. 
So the first question that 
comes to mind is, if you can 
develop Web-service-enabled 
flowcharts using WF and 
deploy them to Dublin, how 
many people will still be interested in 
buying BizTalk Server? Actually, that is 
just a question for Microsoft product 
management to worry about. I've got 
bigger questions. 

How many technologies do we need 
to accomplish the same thing? How 
many times can Microsoft add a new 
technology for simplifying develop- 
ment before the number of simplifying 
technologies becomes just too complex 
to follow? Once we have learned the 
latest-and-greatest way of developing 



LETTERS TO THE EDITOR 

Sun can still rise 



In your editorial "Time's up for Sun's 
CEO" (Dec. 15, page 22), I couldn't 
help but notice your reference to 
Eclipse when you wrote, "Sun's Forte 
lineup and NetBeans project were 
eclipsed by Borland, IBM Rational and a 
host of others." 

Have you tried NetBeans? Have you 
seen the reviews of not only the Java 
support, but also of the PHP, Ruby, 
C/C + + and the upcoming Python sup- 
port? I believe that before you try to use 
such comments as proof for an agenda, 
you should make sure you know the 
truth firsthand. 

As for their other technologies, I 
don't believe most of them languish, 
especially not the ones you listed. Both 
NetBeans and GlassFish are far from 
languishing, and they keep on improving 
and gaining users. I do believe they need 
to market what they have better and, 
yes, turn a profit. 

Part of Sun's hardware strategy needs 
to include different price levels for their 
systems, and maybe their current sets 
are not working even if they have differ- 
ent price levels now. That, or it is just a 
marketing dilemma, and that gets back 
to your main premise about being a 



salesman. 

If Sun can hang in there, smooth out 
the rough spots in such core technolo- 
gies as Virtual Box and OpenSolaris, 
address some of the left-over user issues 
in NetBeans, and pull this all together, 
then developers will have one of the 
most appealing software stacks in Open- 
Solaris, Virtual Box, NetBeans, JavaFX, 
and MySQL, plus other open-source 
technologies. 

Wade Chandler, CCE 

NetBeans Dream Team Member, 
and NetBeans Board Member 

SCO FILES AN EXTENSION, NOT A PLAN 

I notice that SCO has found another 
unsuspecting journalist it can feed its 
version of reality to ("SCO hopes for life 
after bankruptcy," Jan. 15, page 3). 

Notice that SCO filed for another 
extension to file the same day you wrote 
your story saying they'd file before the 
year runs out: groklaw.net/pdf/SCOG- 
BK-649.pdf. This has been going on for 
a long time now. The first "final" dead- 
line was March 2008 if memory serves. 
They've filed a minimum of four 
motions to extend. If you expect SCO to 
ever file a credible plan of reorganiza- 
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apps, how long should we be able to 
expect that knowledge and those skills 
to be relevant? And what about the 
code and other artifacts? Even if there 
is an attempt to continue to execute 
code from older versions, it is hard for 
any vendor to provide comprehensive 
forward-compatibility for abandoned 
products. 

Standards are typically looked to for 
interoperability or portability. But 
standards have another important val- 
ue: stability. The standards develop- 
ment process is inherently tortoise 
paced, especially in comparison to the 
hare that is any group of fired-up soft- 
ware engineers inside a vendor, 
attempting to create the next develop- 
ment-technology breakthrough. In 
contrast, standards-setting work 
requires that a diverse group of indi- 
viduals and companies all think that 
some technological advance is worth 
the disruption. It certainly happens, 
but it happens slowly. And that's a good 
thing for the developers and compa- 
nies that adopt the standard. It delivers 
reliability and predictability when 
developing new applications. 

If you were to develop an application 
using Oslo to create a flowchart where 
the activities are calls to Web Services, 
you would be creating a service orches- 
tration. The standards that are impor- 
tant for service orchestration are WS- 
BPEL and BPMN. WS-BPEL was 
partly designed by Microsoft, but sup- 



port for it in Microsoft products has 
been half-hearted at best. 

There is a community technology 
preview of an activity library that sup- 
ports the OASIS standard (which is 
WS-BPEL 2.0), but the supported 
product release has yet to see the light 
of day. Microsoft just seems to be too 
anxious to release the next great thing 
to be slowed down by the more stately 
pace of standards, or to deliver full sup- 
port for standards it did, in fact, help 
promulgate. 

And BPEL is continuing to progress. 
There is an OASIS committee now stan- 
dardizing support for human activities 
with BPEL via the BPEL4People and 
WS-HumanTask specifications. An 
OMG workgroup is also developing 
BPMN 2.0, which will be more closely 
aligned with BPEL than the current 1.1 
version of the standard is. 

Development technologies should 
be evolved with exceptional care. A 
large body of software will be devel- 
oped that depends on the technology 
and that software will be expected to 
live and evolve for many years. In this 
respect, development technology is 
akin to laws: They shouldn't be made or 
changed lightly. In any democratic gov- 
ernment, it isn't good enough for one 
person or even a small group of people 
to think that a law would be a good idea 
in order for it to be enacted. It has to 
pass the muster of one or sometimes 
two legislative bodies, plus get by an 



executive. This slows things down, and 
many times stability in the law is as 
important as having the right laws. 

In this small respect (and not many 
others), the analogy with development 
technology holds. In many cases, hav- 
ing a fairly stable set of development 
technologies is better than having a 
fast-changing set of technologies, even 
if an argument could be made that the 
changes are for the better. They should 
be a lot better, and if they are that 
much better, it shouldn't be too hard to 
get a group of companies to sponsor an 
effort to standardize the advancement. 

If the standards body follows an open 
process, as OASIS does, it is possible for 
the user community and the vendor 
community to follow the technology as it 
develops. By the time it is done, it is a 
surprise to no one, and vendors and users 
will understand it and be able to use it. 

Microsoft's interest in creating con- 
forming implementations of standards 
waxes and wanes at regular intervals. 
They are continually fighting their own 
desire to invent nifty new technologies 
with their developer community's 
desires for them to follow standards. It 
is up to the development community to 
keep the pressure on Microsoft to do 
the right thing. I 

Michael Rowley is director of strategy 
and technology for Active Endpoints, 
which offers open-source SOA business 
orchestration software. 



tion with hundreds of millions of Lan- 
ham Act violation damages looming 
from IBM, I have a bridge in Brooklyn 
to sell you. 

Jan Olderdissen 

PDF'S BEEN STABLE A LONG TIME 

As far back as Acrobat 3.0, we found the 
Adobe PDF specification to be stable 
enough to build around our entire pre- 
press product line offering ("PDF s new 
status: stable," Dec. 15, page 19). 

I was the content provider for this 
back in 1999, and I simply disagree that 
PDF is "now" stable somehow. Adobe 
has always made the file specification 
available to anyone who could read, with 
great cookbook-like examples and 
descriptions for all. 

Andrew Cochran of Cete Software, 
which makes DynamicPDF, and Dany 
Amiouny, CTO of Amyuni, should just 
stop whining and implement tools that 
reliably parse and generate PDF files 
that follow the specification. The idea 
that somehow they can't figure out 
ISO standards like PDF/X would 
cause me to wonder how reliable their 
solutions are. 

PDF is a stable file format. What 
is not stable is developers trying to cut 
corners and ignoring the specification 
or the many published ISO published 
application notes. Perhaps it was 
unwise to interview developers that do 



not license or use the Adobe SDK. 
Sorry, but for a developer to complain 
that the format is somehow "unstable," 
well, that is like asking my 3-year- 
old how stable his older brother's 
bicycle is. 

Michael Jahn 

Jahn & Associates 

PDF Color Conversion Specialist 



WHAT DO YOU THINK? 

SD Times welcomes feedback. Letters 
should include the writer's name, com- 
pany affiliation and contact informa- 
tion. Letters become the property of 
BZ Media and may be edited for space 
and style. Send your thoughts to 
feedback@bzmedia.com. 



SaaS set to soar globally DATA WATCH 



i 



More than half of developers 
say they expect to work on 
applications delivered in 
software-as-a-service 
form in 2009, according to 
a survey by Evans Data. 
Adoption expectations were 
above 50% in Europe, the 
Middle East and Africa. 
1,300 developers were 
interviewed for the study. 





52% of all developers 

surveyed expect to be 

using SaaS in 2009. 



30% of developers in the 

United States and Canada 

expect to be using SaaS in 2009. 











Source: Evans Data Survey 



53% of Europe, the 

Middle East and Africa 

developers expect to be 

using SaaS in 2009. 



37% of North American 

developers surveyed said 

their work currently involves 

some type of virtualization. 
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Python: arbitrarily interesting 



Python is the easiest language in 
which to do interesting things. I'm 
not claiming that it's the best language 
for learning programming, the appropri- 
ate language for your next enterprise 
project, or even, for interesting things, 
the most powerful language. Only that 
it's easy to do interesting things because 
the language is approachable, flexible 
and has been popular with scientists. 

Professional programmers might find 
the syntactical niceties of "Hello, World" 
or the calculation of a factorial as an 
"interesting thing," but no one else does. 
You need graphs at least, if not interac- 
tive graphics, image processing and, say, 
robots. And while for any one of these 
there are specialized languages that 
might be easier for each individual task, 
Python is your best bet for easy access to 
arbitrary values of "interesting." 

IronPython, Microsoft's flagship of the 
Dynamic Language Runtime, recently 
achieved its 2.0 release. The cliche is that 
Microsoft takes three releases to get a 
product right, and programming Iron- 
Python in Visual Studio is still not as 
seamless as programming in C# or Visual 
Basic. I'm by no means an advanced 
Python user and I take no stand on the 
completion of the language or its support 
for Very Important Frameworks. But in 




my eyes, IronPython and its ability to 
glue together interesting libraries and 
tools from both the .NET and the Python 
worlds is already doing very well. 

For fellow dilettante Python program- 
mers, I suggest the book "IronPython in 
Action" by Michael Foord and Christian 
Muirhead. Soon to be published by Man- 
ning (I reviewed a preprint), 
it's especially strong in provid- 
ing simple-but-not-simplistic 
illustrations and tables claryify- 
ing behind-the-scenes struc- 
tural elements. Visual Studio 
screenshots may be a little 
more common than I'd like, 
but I suppose these would be 
welcome to those new to the 
VS environment. 

A typical challenge for 
books about technologies ported to new 
environments is balancing viewpoints. 
The Foord/Muirhead book strikes such a 
balance, providing "Pythonic" topics such 
as test-driven development, mocks and 
metaprogramming, along with clear dis- 
cussions of .NET's CLR structure, Win- 
dows Presentation Foundation, and even 
programming PowerShell with Python. 

I've talked before in this column 
about Resolver One, the spreadsheet 
powered by and programmable in Iron- 
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Python. Soon after the IronPython 2.0 
release, Resolver Systems announced a 
programming contest for Resolver One 
(first prize: US$15,000 — read more at 
www.resolversystems.com). 

I can't praise enough the combination 
of spreadsheet and programming models 
embodied in Resolver One: I truly 
believe that this is one of the 
best ways to do exploratory 
programming. Although it's 
been 15 years since I've 
worked with fuzzy logic, I was 
able to put together the not- 
entirely-rudimentary building 
blocks of a fuzzy manifold edi- 
^fy tor (a tool for visualizing the 

response curve of a fuzzy sys- 
tem) in a matter of hours. 
Encouraged by the 
prospect of developing an easy-to-use tool 
for fuzzy logic, I began envisioning how to 
explain my still-to-be-developed library to 
others. This gave me the perfect reason to 
install Blue Reference's Inference for 
.NET (inferencefordotnet.com). Infer- 
ence for .NET is a tool for literate pro- 
gramming using .NET dynamic languages 
and Microsoft Office. Today, literate pro- 
gramming is a mashup of programming 
and word (or spreadsheet) processing. 
The presentation and formatting tools of 



Larry 



Word or Excel can be used to explain 
code snippets, or the code can be unwo- 
ven from the document and executed. 

Literate programming naturally 
appeals to writers, and with the rise of 
blogs and wikis, it seems like something 
whose time may have come. On the oth- 
er hand, nothing is as humbling as 
memorializing your shortcuts, ineffi- 
ciencies and general shiftlessness on a 
function-by-function basis (at least that 
is my experience. It might be different 
for the talented). 

Inference for .NET is interesting to 
use, and I have only scratched the surface 
of its capabilities, but literate program- 
ming and Python seem to be an excep- 
tionally good match, since the language 
lends itself to dense expressions that can 
require a good bit of explanation. 

The problem with fun things is that 
every success spurs your ambition. My 
Resolver One fuzzy logic editor spurred 
my desire to write a tutorial. My Infer- 
ence for .NET writing spurred my desire 
for some explanatory 3D graphics. That's 
brought me right back to WPF. Between 
Charles Petzold's "3D Programming for 
Windows" (Microsoft Press) and Iron- 
Python, I'm sure I'll get my fuzzy logic 
editor out the door . . . sometime before 
the next Presidential election. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 
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Finally, a Documentation Tool 
that Doesn't Forget the Developers 



ComponentOne® Doc-To-Help® is the only 
tool that helps developers and writers work 
seamlessly together to create deliverables 
that include Help, printed manuals, reference 
documentation and more. Unlike most 
documentation tools, Doc-To-Help 
includes technology specifically 
designed for the developer. 



ed context-sensitive Help in your applications 
allow technical writers to perform topic 



i/licrosoft Sandcastl 



Adobe Drear 

ilt-in XML-based editor) 



, HTML Help, Help 2.0, and mo 



You get all this in one box! Imagine having one package that makes documentation 
simple for both the developer and the technical writer. 

" ■:■ ii ■ 1 1. -mm' Jill' 

Doc To Help 2009 

DOWNLOAD YOUR FREE TRIAL TODAY 

www.componentone.com/cometogether 
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FutureTest is a two-day 
conference created for se- 
nior software test and 
QA managers. FutureTest 
will provide practical, re- 
sults-oriented 
sessions taught by top in- 
dustry professionals. 



JUST TWO 

POWER-PACKED 

DAYS! 




Great Sessions! Great Speakers! 
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Virtually Stress-Free Testing 
In the Cloud 
By Jinesh Varia 

Amazon.com 

Technology evangelist 



The Cyber Tester: 

Blending Human and Machine 

By Paco Hope 

Cigital 

Technical manager 

at software security consultancy 

Enterprise Security 
You Can Take to the Bank 
By James Apple 

Bank of America 

Senior technical manager of Application 
Development Security Framework program 



o 




Testing in Turbulent Times 
By Robert Sabourin 

AmiBug.Com 

President, development, testing and 
management consultancy 



How HBO Covers 
Its Digital Assets 
By Jaswinder Hayre 

HBO 

Program manager of application security 



Testing RIAs in a Flash 
By Kristopher Schultz 

Resource Interactive 

Leader of Rich Internet Application 
Practice Group 






Web Bloopers — Avoiding Com- 
mon Design Mistakes 
By Jeff Johnson 

Ul Wizards principal consultant, respected in 
the art of human-computer interaction 



Managing 
The Test People 
By Judy McKay 

Quality architect and author of 
"Managing the Test People" 



Embed Security in QA by 
Breaking Web Apps 
By Ryan Townsend 

Time Inc. 

Lead security engineer 



5 Reasons to Attend FutureTest 2009 




1 You'll hear great ideas to help 
• your company save money with 
more effective Web applications test- 
ing, quality assurance and security 

2 You'll learn how to implement 
• new test & QA programs and 
initiatives faster, so you save money 
and realize the benefits sooner. 

3 You'll listen to how other 
• organizations have improved 
their Web testing processes, so you 
can adopt their ideas in your own 
projects. 



Produced by 

Redwood Collaborative Medi 

Software Test 
& Performance 



4 You'll engage with the newest 
• testing methodologies and 
QA processes — including some you 
may never have tried before. 

5 You'll be ready to share practi 
• cal, real-world knowledge with 
your test and development colleagues 
as soon as you get back to the office. 

Add it all up, and it's where you 
want to be in February. 



February 24-25, 2009 

The Roosevelt Hotel 

New York, NY 



www.futuretest.net 



www.sdtimes.com 
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ill actors be part of your repertoire? 




In my Nov. 15 column ("A new twist on 
threads"), I discussed the emerging 
importance of fine-grained parallelism. 
The gist of the column was that the tra- 
ditional approach to parallelism, called 
coarse-grained parallelism, in which a 
specific task is assigned in toto to a sin- 
gle thread, leads to inefficient use of the 
processor. A better approach is to break 
up long tasks into a series of smaller 
tasks, then forward each of those to a 
thread pool that runs them efficiently 
and makes good use of all the underlying 
silicon resources. 

The thread pool uses a work queue to 
hold these small tasks, and this queue 
assigns the task to the first available 
thread. This option provides inherent load 
balancing — all threads can work away. If 
one thread is held up (waiting for a slow 
process, such as disk I/O), it's swapped out 
and another task is swapped in. 

Thread pools provide an additional 
degree of efficiency: They determine at 
runtime the ideal number of threads to 
use. The optimal number is difficult to 
use in coarse-grained parallelism. For 
example, with a coarse-grained approach, 
if you break your application into six 
threads, then running it on a dual quad- 
core system will mean that two cores lie 
dormant. Thread pools, however, use all 



the available pipelines and distribute the 
smaller tasks over them. Therefore, you 
gain load balancing and nearly optimal 
usage of the processor resources. 

Fine-grained parallelism, however, 
does not free developers from the chal- 
lenges of coarse-grained threads. These 
include mutual exclusion for shared data 
items and the constant threat 
of deadlock (in which two 
threads wait on each other). 

As a result, a new model for 
writing concurrent applica- 
tions is emerging. It borrows a 
technique from academia. The 
key structure is called an actor. 
In its simplest form, an actor is 
a computation entity whose 
primary actions are performing 
operations that are passed to it, 
passing data to other actors, and creating 
new actors. 

The operations that an actor per- 
forms locally are entirely local; they have 
no effects on other actors. To affect oth- 
er actors, the actor must pass a message 
to them, including the data they need or 
the new instructions. For example, an 
actor might be created to multiply to 
matrices. The matrices and the multipli- 
cation function are passed to the actor. 
The resulting matrix might then be 



Integration Watch 




passed to another actor that collects 
results and processes it further. 

This parallel programming technique 
relies on approaches that initially might 
seem peculiar. For example, it tends not 
to use variables (although variables can 
be used). This structure is familiar to 
Java programmers in the way strings are 
handled. Java strings are not 
variables. Modify a single 
character and Java creates a 
new string. 

By using constants primari- 
ly, parallelization is improved 
as data cannot be unexpected- 
ly changed by another thread. 
Done correctly, an actor can- 
not change the data items 
inside another actor. Such 
changes are done by sending 
messages to the actor. Because of this 
built-in mutual exclusion, actors are a 
good match for parallelism. If this appears 
a little wild, think of REST, which is an 
almost exact systems analogy. (Requests 
and data sent as messages, no external 
modification of internal state save by mes- 
sages, ability to run many instances in par- 
allel without shared data, etc.) 

Today, Erlang is the language with the 
greatest commercial acceptance that uses 
actor-like constructs. For Java aficiona- 



dos, there is an actor framework called 
ActorFoundry (osl.cs.uiuc.edu/af). But, 
on the JVM, the best choice is the emerg- 
ing language Scala, which allows you to 
transition to actors because it also pro- 
vides support for traditional object-ori- 
ented-style programming (to which 
actors can be added incrementally). 

A similar concept in pure data man- 
agement (that is, data selection and 
transformation) is known as dataflow, a 
design that was first expounded in the 
1960s. It too uses message passing and 
adds a built-in capability to monitor the 
relationship between two data items, 
such that if one changes, the other is 
automatically updated (similar to a total 
field in a spreadsheet). 

Pervasive Software is about to release 
a product called DataRush that has been 
handling massive amounts of data in 
tests with only modest hardware plat- 
forms, due to its ability to leverage 
dataflow across all the processor cores. 
It's a Java library, so, again, developers 
can move into this model easily. 

Whether via dataflow or via actors, 
message-passing parallelism is likely to 
become more prominent during the 
next few years as a way to leverage the 
many cores in today's PCs and servers. 
Now you know. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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Subscribe today to 
SharePoint TechReport, 

a bi-weekly newsletter for SharePoint users. 



Just go HERE: bzmedia.com/sptr 

and sign up for SP TechReport today! 



Instantly Search Terabytes of Text 



dtSearch 

instantly Search i 
Terabytes ofText 
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HERE WE GO AGAIN, as the company 
that once had the best brand in software 
development jumps back into the 
blender. 

You've probably seen the cheery sto- 
ries that broke on the Web last month 
about Tod Nielsen, former CEO of Bor- 
land, becoming COO of VMware. The 
positive, "Isn't this great?" coverage was 
skillfully orchestrated by VMware's 
crack PR team, who did such a good job 
that nearly every Web reporter wrote 
nearly exactly the same upbeat, happy- 
happy, group-hug story. 

What was neglected in almost all of 
the media coverage is: what about Bor- 
land? Because VMware's PR team didn't 
talk about Borland, few reporters both- 
ered to look at the mess that Nielsen 
created during his three-year tenure. 

(It's striking that at Macworld, I was 
talking to a software developer and casu- 
ally mentioned Borland. He asked, "Are 
they even still in business?") 

Nielsen joined Borland as president 
and CEO in November 2005. During 
that time, all that he succeeded in doing, 
as far as I can tell, was to spin off the 
tools division, which operated for a 
while as a subsidiary called CodeGear. 
CodeGear was purchased by Embar- 
cadero Technologies in May 2008. 

So, as Nielsen moves from the com- 
mand chair at Borland to a supporting 
role at VMware, what has he left 
behind? When announcing his depar- 
ture, Borland also announced prelimi- 
nary fourth-quarter revenues in the 
range of US$38.5 to $40 million. That's a 
big drop over fourth-quarter 2007 rev- 
enues of $61.5 million. The company 
also announced that it will layoff 130 
employees, or about 15% of its regular 
full-time staff. 

Goodbye to Nielsen, who looks like 



he jumped before he was pushed. And 
good luck to new Borland acting presi- 
dent/CEO Erik Prusch, who previously 
served as Borland's CFO. He's going to 
need it. (By the way, when a company 
promotes its CFO to acting CEO, 
instead of advancing a sales or product 
executive, that's a good sign that the 
company's going to be sold soon.) 

— Alan Zeichick 

"EVERYTHING IS JUST a few hun 

dred clicks away." That is what Brian 
Gilman, Apple's senior product innova- 
tor (wink, wink), proclaims in a spoof 
news broadcast from the Onion News 
Network entitled "Apple Introduces 
Revolutionary New Laptop With No 
Keyboard." The Onion will make you cry 
with laughter with its report on the Mac- 
Book Wheel, which replaces the every- 
day keyboard with Apple's touch sensi- 
tive click wheel, found on your iPod. 
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The "news broadcast" is carried out 
well, with a very convincing conference 
setup. Some of the more noteworthy 
lines are, "I'll buy almost anything if it's 
shiny and made by Apple" from a con- 
sumer, and, "Alex Zalban was one of the 
lucky few to get to try out a Mac Wheel, 
and spent 45 minutes typing an e-mail to 
his friend." 

If you haven't seen the video, Google 
the title: it's good for a few laughs. 

— Jeff Feinman 



THE REVIEWS of Windows 7 have 
been very positive so far, but my opinion 
is still out. I'll admit that I have not 
tried it yet; it would have to install 
on my Mac. Before the switch to the 
Apple side, I habitually beta-tested 
each new edition of Windows that I 
could get my hands on, even internal 
builds that had the build numbers writ- 
ten on the CDs with marker. 

Windows Vista hosed my machine 
twice and broke the habit. My old, "oF- 
reliable" PC is just fine running 
Windows XP, and I don't feel like hav- 
ing to reinstall Windows and my appli- 
cations again. Maybe Windows 7 will 
win me back when it's closer to pro- 
duction. 

— David Worthington 

THIS MONTH, I spent a lot of time in 
the worlds of Mac and Ruby. Not at the 
same time, mind you, though Apple 
has pushed some Ruby tools into 
Xcode. 

There are some similarities to be 
found between the Apple and Ruby 
worlds, though. Both are home to rav- 
enously eager fans who consider their 
beloved to be the only rational choice. 
Both worlds are small, but they are 
gaining popularity in the realm of big 
business. On the Ruby side of things, 
there is a sense that businesses are 
starting to catch on to the advantages 
of Rails. Certainly, a sizable chunk of 
the Web 2.0 world is Ruby-based. Of 
course, Apple is still wildly popular in 
Hollywood, in music studios and in 
other dens of creativity. 

Perhaps the greatest single similarity 
between the Macintosh and Ruby is 
their popularity among the hip, cool 
trendsetters. 

— Alex Handy 
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EMC is expected to cut about 2,400 jobs over the next 
12 to 15 months, which would equal about 6% of the 
company's staff. The company also announced preliminary 
financial earnings showing US$4 billion in revenue for 
the fourth quarter of 2008, which it said was an EMC 
record for quarterly revenue. The reported revenue is 
approximately 8% more than the third quarter of 2008 
and represents 4% growth over the same period a year 
ago . . . Oracle has reportedly cut around 500 jobs in 
its North American sales and consulting businesses. 
The company had 33,526 employees in the U.S. at the end 
of 2008 and 86,657 employees worldwide, according to 
a filing with the Securities and Exchange Commission 
. . . Rally Software will acquire 6th Sense Analytics, 
a company that provides on-demand metrics products. 
Rally executives said that the acquisition will provide Rally 
customers with more access to project data, and it will 
improve reporting on their projects' progress and quality 



status in their agile development. Terms of the deal were 
not disclosed . . . Sun Microsystems announced plans to 
acquire Q-layer, a company that automates the deploy- 
ment of cloud infrastructures. Belgium-based Q-layer 
will become part of Sun's cloud-computing business 
unit, which develops and integrates cloud-computing tech- 
nologies, architectures and services, according to Sun 
executives. 

EARNINGS: Application development company Blueprint 
Systems reported a 300% growth in revenue on a year- 
over-year basis for its quarter that ended Dec. 30, 2008 
. . . TIBCO Software reported a fourth-quarter 2008 rev- 
enue of US$185.5 million and net income of $32.3 million, 
compared with a revenue of $186.1 million and net income 
of $27.6 million for the fourth quarter of 2007. Full-year 
cash flow from operations in 2008 was $152 million, 49% 
higher than 2007.1 
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Cloud Computing 
Conference 

Toronto 

PLUM COMMUNICATIONS 

www.itcloudconference.com 



February 11 



Southern California 
Linux Expo 

Los Angeles 
SCALE INC. 

scale7x.socallinuxexpo.org 



February 20-22 



FutureTest 2009 

New York 

REDWOOD COLLABORATIVE MEDIA 

futuretest.net 

Emerging Technology 
Conference 

San Jose 
O'REILLY MEDIA 

en.oreilly.com/et2009 



February 24-25 



March 9-12 



SD West 

Santa Clara 
THINK SERVICES 

www.sdexpo.com 


March 9-13 


MIX09 

Las Vegas 
MICROSOFT 

2009.visitmix.com 


March 18-20 


EclipseCon 2009 

Santa Clara 
ECLIPSE FOUNDATION 

www.eclipsecon.org 


March 23-26 



Game Developers 
Conference 

San Francisco 
THINK SERVICES 

www.gdconf.com 



March 23-27 



PyCon 

Chicago 

PYTHON SOFTWARE FOUNDATION 

us.pycon.org/2009 



March 27-29 



STPCon Spring 

San Mateo, Calif. 

REDWOOD COLLABORATIVE MEDIA 

www.stpcon.com 



March 31— April 2 



Web 2.0 Expo 

San Francisco 
O'REILLY MEDIA 

en.oreilly.com/webexsf2009 
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MySQL Conference 
and Expo 

Santa Clara 
O'REILLY MEDIA 

www.mysglconf.com 



April 20-23 
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San Francisco 




RSA 




365.rsaconference.com 
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Las Vegas 
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en.oreilly.com/rails2009 




Micro Focus World 
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Dallas 




MICRO FOCUS 




www.microfocusworld.com 




SPTechCon 


June 22-24 


Boston 




BZ MEDIA 




www.sptechcon.com 





For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
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Work with InterSystems. 



ot separate systems. 




The fastest way to have a connected workplace- 



work with InterSystems Ensemble® software to raise 
productivity and lower costs. 

Ensemble is a rapid integration and development 
platform that makes it much easier to connect applications, 
processes, and people. IT managers who have switched 
from other integration products report they can finish 
projects in half the time with Ensemble. 

For your future development efforts, if you embed 
Ensemble you can create a new class of applications that 
are connectable. Plus, you'll be able to enhance legacy 
applications with adaptable workflow, browser-based user 



interfaces, rules-based business processes, dashboards, 
and other innovations - without rewriting your code. 

Ensemble includes InterSystems Cache®, the world's 
fastest object database. Cache's lightning speed, massive 
scalability, and rapid development environment give 
Ensemble unmatched capabilities. 

For 30 years, we've been a creative technology 
partner for leading enterprises that rely on the high 
performance of our products. Ensemble and Cache are 
so reliable that the world's best hospitals use them for 
life-or-death systems. 



InierSysiems 



See product demonstrations at InterSystems.com/Connectl3JJ 
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Advanced Digital Dashboards Require 
Advanced Data Visualization 
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Available for Visual Studio 2008 & SQL Server 2008 Reporting Services 

Build Custom Executive Dashboards With Data Visualization Solutions From Dundas! 

As the leader in data visualization solutions for .NET, SharePoint 2007 and SQL Server Reporting Services 2005 & 2008, Dundas offers the latest 
award-winning chart, gauge and map technologies. See why Fortune 500 companies around the globe trust Dundas to create advanced custom 
dashboard applications. 

For customers requiring additional assistance, Dundas Consulting offers unmatched expertise and experience in creating and optimizing digital 
dashboards and their supporting infrastructure. Our team of highly specialized software consultants and graphic artists can help you jump start 
your dashboard initiative, build your complete system or simply advise you on all the tasks associated with bringing a dashboard system to life. 

To see for yourself how Dundas products can improve your applications, download full evaluation copies of Dundas Chart, Gauge and Map from 
www.dundas.com/downloads . 
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Chart Gauge Map 



Available for: 



[ 



SharePoint 2007 .NET SQL Server Reporting Services 



Microsoft 

GOLD CERTIFIED 

Partner 



Data Management Solutions 



www.dundas.com 



Microsoft, SharePoint, SQL Server and Visual Studio are registered trademarks of Microsoft Corporation in the United States and/or other countries 



www.dundas.com 
info@dundas.com 
(416)467-5100 



Advanced Data Visualization for Microsoft® Technologies 
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March 31 - April 2, 2009 

San Mateo Marriott I San Mateo, CA 
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Unparalleled Education 



60+ sessions covering software test/QA and perform- 
ance issues across the entire application life cycle 

Full-day tutorials offer complete immersion in the topic 




Ultimate Networking 
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Share experiences, challenges, ideas, and solutions with 
your peers and industry leaders — the STPCon faculty 
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REDWOOD SoftwareTest 
Collaborative Media & Performance 



Exciting New Tools & Technologies 



Get a first look at the latest tools and services. Visit with 
vendors in a relaxed environment. See the products in 
action, and find the tools and technologies that can help 
your organization reach its peak performance 
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Don't miSS the best STPCon yet! Register by March 13th and save up to $300! 

Visit www.stpcon.com to register today! 
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"If you want to learn about 
the latest test and perform- 
ance techniques from the 
industry experts, you want 
to attend STPCon!" 

MICHAEL MARQUIZ, 

SOLUTIONS ARCHITECT, 

CISCO SYSTEMS 




Hung Q. Nguyen 

Chairman and CEO, 
LogiGear Corp. 



Testing bi| [he Numbers! 



Numbers are everything. They're the bottom line. They're in your bug list, 
your budget and your bank account. They're the number of days left till 
release, the number of people on your team and the number of test cases 
they ran. How many bugs did they find? How many were fixed? How many 
remain? Of those, how many are critical? It's all in the numbers. 

Unfortunately, numbers also dominate the headlines. The number of job losses, the highs and lows of the 
stock market, the number of billions for the latest corporate bailout. 

The Software Test & Performance Conference is here to help. With the high cost of software failures, 
employing the most effective software testing techniques is one important way to keep costs low. And 
we've lowered the price to help make sure that STPCon will not break your budget. 

Security flaws, usability problems, functional defects, performance issues— they all carry a tremendous 
price tag. It's more important than ever to be sure that new applications are written to be secure from the 
start and are deployed only after they've been thoroughly tested. Shorter software development cycles and 
tightening budgets require testing and performance processes that are as cost-effective as possible. 

If you're a software developer trying to gain performance, a test/QA or development manager responsible 
for improving the quality of your company's software, or a test/QA specialist who wants to take your skills to 
a higher level, the Software Test & Performance Conference is just right for you. Every year we combine the 
industry's best trainers with professional testers from companies just like yours to give you a program that 
appeals to testers and managers of all abilities and skill levels. 

On March 31 -April 2 in San Mateo, select from nearly 70 classes and tutorials given by testers at Cisco, 
Expedia.com, Intuit, Microsoft, Progressive Insurance, Verizon and Volvo. Many of our usual favorites also 
will be there, including Ryan Berg, Hans Buwalda, Bob Galen, Chris Sims and Mary Sweeney. Learn from 
these experts how to implement quality assurance across an entire project, pinpoint and fix performance 
bottlenecks and adapt testing methods both familiar and emerging. 

So join us at STPCon in San Mateo for the newest techniques, tips and tricks to help you improve require- 
ments gathering, Ul design, function testing, and load and performance testing — techniques that will have 
your applications humming in no time. , 

I hope to see you there. 



Edward J. Correia, Conference Chairman 



Opening Kepte 



Wednesday, April 1 — 8:45 am - 9:45 am 



To Keep Your Testing Budget, Stop Saying ROI 

One way or another, you're going to spend money on software testing. So it's really not the "invest- 
ment" that you're selling upstairs, but the "return on expenses" that you need to optimize. That's 
because with today's economy, CFOs aren't signing off on "investments"; they're battening down the 
hatches. Hear from LogiGear co-founder Hung Nguyen how a returned-value analysis can get you the 
testing budget you need, while providing total transparency into the value of testing and keeping your 
staff motivated and confident in the stability of your company. 

Hung Q. Nguyen, LogiGear chairman and CEO, is responsible for the company's strategic direction and 
management His experience over the past two decades includes leadership roles in software develop- 
ment and quality, product and business management at Spinnaker, Powerilp, Electronic Arts and Palm 
Computing. Hung teaches software testing at LogiGear University, and at the University of California 
Berkeley Extension and Santa Cruz Extension in San Francisco and Silicon Valley 
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Special Conference Events and Features 



Tuesday, March 31 



Lightning Talks 



5:00 pm - 6:00 pm 



Fast. Targeted. To the point. Don't miss Lightning Talks, where your favorite speakers 
speed-talk on the essence of test concepts and ideas. Each speaker has 5 minutes to 
wow you with an idea. If the speaker goes on too long, you're invited to let them know 
in not-so-subtle ways! 



Hands-on Tool Showcase 



6:00 pm - 8:00 pm 



Demos and drinks! Technology meets hospitality in these open-forum sessions from 
STPCon sponsors. Catch up on the latest techniques and practices while enjoying 
food and beverages in a friendly atmosphere. 



Wednesday, April 1 



Open Panel Discussion 1:15pm - 1: 5o Pm 

You pick the topic for discussion by a panel of testing experts. 



Expo Attendee Reception 

Food, drinks and pleasant conversation in the Exhibit Hall. 



5:00 pm - 7:00 pm 



Thursday, April 2 



Prize Patrol 



12:00 pm - 1:00 pm 



Here's your chance to win prizes from exhibitors at STPCon. Drawings are conducted 
at each booth and winners are announced on the spot. You could be one of them! 



Exhibit Hall 



Get a first look at the latest tools and services from 
the industry's top companies. Visit with vendors in 
a relaxed environment. See the products in action, 
and find the tools and technologies that can help 
your organization reach its peak performance. 



HOURS: 



Wednesday, April 1 
3:00 pm - 7:00 pm 

Thursday, April 2, 
9:30 am- 1:15 pm 




Event Schedule 






Monday, March 30 

4:00 pm - 7:00 pm 






Tuesday, March 31 

7:30 am - 7:00 pm 
7:30 am - 9:00 am 
9:00 am - 10:30 am 
10:30 am- 11:00 am 
11:00 am- 12:30 pm 
12:30 pm - 1:45 pm 
1:45 pm- 3:15 pm 

I 3:1 5 pm -3:45 pm 
3:45 pm - 5:00 pm 
5:00 pm - 6:00 pm 
6:00 pm - 8:00 pm 

Wednesday, April 1 

7:30 am - 7:00 pm 
7:30 am - 8:45 am 
8:45 am - 9:45 am 
10:00 am- 11:00 am 
11:15am- 12:15 pm 
12:15 pm- 1:15 pm 
1:15 pm- 1:50 pm 
2:00 pm - 3:00 pm 
3:00 pm - 7:00 pm 
3:00 pm - 3:45 pm 



3:45 pm - 4:45 pm 
5:00 pm - 7:00 pm 



Thursday, April 2 

7:45 am - 4:00 pm 
7:45 am - 8:45 am 
8:45 am - 9:45 am 
9:30 am- 1:15 pm 
9:45 am - 10:30 am 

10:30 am- 11:30 am 
11:30 am- 1:00 pm 
12:00 pm - 1:00 pm 

1:00 pm -2:00 pm 
2:00 pm -2:15 pm 
2:15 pm -3:15 pm 
3:15 pm -3:30 pm 
3:30 pm - 4:30 pm 




Registration Open 



Registration Open 

Continental Breakfast 

Full-Day Tutorials 

Coffee Break 

Full-Day Tutorials (continued) 

Lunch Break 

Full-Day Tutorials (continued) 

Coffee Break 

Full-Day Tutorials (continued) 

Lightning Talks 

Hands-On Tool Showcase 



Registration Open 

Continental Breakfast 

Opening Keynote 

Technical Classes - 100 series 

Technical Classes - 200 series 

Lunch Break 

Open Panel Discussion 

Technical Classes - 300 series 

Exhibit Hall Open 

Coffee and Ice Cream Social 
in Exhibit Hall 

Technical Classes - 400 series 

Reception in Exhibit Hall 





Registration Open 

Continental Breakfast 

Technical Classes - 500 series 

Exhibit Hall Open 

Coffee and Doughnuts 
in Exhibit Hall 

Technical Classes - 600 series 

Lunch Break 

STPCon Prize Patrol 
in Exhibit Hall 

Technical Classes - 700 series 

Break 

Technical Classes - 800 series 

Break 

Technical Classes - 900 series 



Register Early and Save: -l -415-78S-3419 



Conference Planner 




Monday, March 30 



4:00 am - 7:00 pm 



Registration Open 



Tuesday, March 31 Wednesday, April 



7:30 am - 7:00 pm 
Registration Open 



8:45 am - 9:45 am 
Opening Keynote 



3:00 pm - 7:00 pm 
Exhibit Hall Open 



Tutorials 



9:00 am - 5:00 pm 



T-1 First Steps to Test 
Automation 

— Walsh 



T-2 Managing the 
Test People 

— McKay 



T-3 Improving Web 
Application 
Performance 
Using Six Sigma 
—Jain 



T-4 Agile & High 
Speed Testing 
Techniques 

—Galen 



T-5 Automated Data- 
base Testing: 
Using Stored 
Procedures 

— Sweeney 



T-6 Managed Test 
Automation 

— Buwalda 



T-7 Combinatorial 
Analysis: A Pair- 
Wise Testing Primer 
— Rollison 



7:30 am - 7:00 pm 



Registration Open 



8:45 am - 9:45 am 



Opening Keynote 



3:00 pm - 7:00 pm 



Exhibit Hall Open 



3:00 pm - 3:45 pm 



Coffee & Ice Cream Social in Exhibit Hall 



5:00 pm - 7:00 pm 



Technical Classes 



10:00 am -11:00 am 



101 Quality Through- 
out the Software 
Life Cycle 

— Feldstein 



102 Agile Test 
Development 

— Buwalda 



103 Effective Use of 
Static-Analysis 
Testing 

—Anderson 



104 The Makings 
of a QA Leader 
— Sims 



105 Testing with 
Stochastic Test 
Data 

— Rollison 



106 Test-First GUIs: 
The Model-View- 
Presenter 
Approach 

— Walsh 



107 Managing the 
Test People 

—McKay 



Reception in Exhibit Hall 



11:15 am -12:15 am 



201 Model-Based 
Testing for Java 
and Web-based 
GUI Apps 

— Feldstein 



202 The Most Effective 
Ways to Improve 
Software Quality 

— Sims 



203 The 5% Rules of 

Test Automation 

— Buwalda 



204 Assess Your 
Way to Better 
Test Team 
Performance 

—Hackett 



205 Training the 
Next Generation 
Of Testers 

— Rollison 



206 Maximizing SQL 
Server 2005 
Performance 

—Sweeney 



207 TTo be announced 
Please check the 
website. 



2:00 pm - 3:00 pm 



301 Balancing 
Test-to-Break, 
Test-to-Validate 
and Metrics 

— Feldstein 



302 Performance- 
Tuning Java 
Applications, Part 
1 

— Bartow 



303 Requirements 
Analyses and 
Collection 
— Quigley and Pries 



304 How to Break 
Web Software 

— Basirico 



305 Releasing 
Products 
in an Agile 
Enterprise, Part 1 
— Galen 



306 Automated 
Testing 
in the .NET 
Environment 

— Sweeney 



307 To be announced 
Please check the 
website. 



3:45 pm - 4:45 pm 



401 Techniques for 
Influencing 
Upstream 
Decisions 

— Feldstein 



402 Performance- 
Tuning Java 
Applications, 
Part 2 

— Bartow 



403 Moving to a 
Truly Virtual QA 
Lab 

— Knox 



404 The Path To A 
Secure 
Application 

— Berg 



405 Releasing 
Products 
in an Agile 
Enterprise, Part 2 
— Galen 



406 Static Analysis 
on Steroids 

— daVeiga 



407 To be announced 
Please check the 
website. 
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"This is where you realize that testers are heroes! 




MEHMET EFE, SENIOR MANAGER, SHOPZILLA 



Software Test 
& Performance 

GONfEi 




Thursday, Hpril 2 



7:45 am - 4:00 pm 



Registration Open 



9:30 am -1:15 am 



Exhibit Hall Open 



9:45 am -10:30 pm 



Coffee & Doughnuts in Exhibit Hall 



12:00 pm -1:00 pm 



Technical Classes 



8:45 am - 9:45 am 



STPCon Prize Patrol in Exhibit Hall 



10:30 am -11:30 am 



1:00 pm -2:00 pm 



2:15 pm -3:15 pm 



3:30 pm - 4:30 pm 



501 The Hunt for 
Malicious Code 
—Berg 



601 Is Your Inversion 
of Control 
Framework 
Secure? 

—Berg 



701 Effective 
Training 
of an Offshore 
Test Team 

—Hackett 



801 Performance 
Bugs and 
Investigation 
Strategies 

— A. Wong 



901 Tools and 

Techniques for 
Fixing Memory 
Errors 

—Gottbrath 



502 Tester Career 
Paths For an 
Outsourced 
Economy 

—Hackett 



602 Test Automation 
of Search Results 
and Other Data- 
driven Apps 

— Bulgakov 



702 A Buzz About 
Fuzz: Finding 
Software 
Vulnerabilities 

— Basirico 



802 Performance 
Testing of Large 
Distributed 
Systems 
— Quigley and Pries 



902 GUI Bloopers: 
Avoiding 
Common Design 
Mistakes 

— Johnson 



503 Strategies for 
Unit Testing in 
Spite of Legacy 
Code, Part 1 

—Loeb 



603 Strategies for 
Unit Testing in 
Spite of Legacy 
Code, Part 2 

—Loeb 



703 The Business 
Value of 
Usability 

— Johnson 



803 Designing with 
the Mind in 
Mind 

— Johnson 



903 Testing Visibly 

— Kapfhammer 



504 Setting Agile- 
Centric Release 
Criteria 

—Galen 



604 Testing in an 
Agile 
Environment 

— Walsh 



704 End-to-End Perfor- 
mance Process: 
Requirements to 
Production Monitoring 
— A. Wong 



804 Performance 
Engineering for 
Large Application 
Clusters 

— Bartow 



904 Test Destiny: 
The Psyche of a 
Professional 
Tester 

— Massey 



505 Testing Live 
Apps with 
Virtualization 

— Ewe 



605 Managing 
Embedded 
Product Testing 
—Quigley and Pries 



705 Optimizing The 
Testing Effort With 
Keyword-Driven 
Frameworks 

—Massey 



805 Web Services/ 
SOA Testing 
Made Easy 

—Subbarao 



905 Finding 

Vulnerabilities 

Without 

Attacking 

—McPhee 



506 The Marriage of 
Agile and Test 
Management 

—Massey 



606 Experience 
with Keyword 
Automation 

—Buwalda 



706 Optimizing Web 
2.0 Application 
Performance 

— H. Wong 



806 Testing in the 
Cold (And Ideas 
to Warm You Up) 
—Buwalda 



906 Finding .NET 
Performance 
Bottlenecks 
Using PerfMon 
— Nandi 



507 To be announced 
Please check the 
website. 



607 To be announced 
Please check the 
website. 



707 Five Common Mis- 
takes When Secur- 
ing Web Applications 
— Ewe 



807 To be announced 
Please check the 
website. 



907 To be announced 
Please check the 
website. 



Register Early and Save: +1-41S-785-3419 




"I found the material 
covered in the 
Tutorial and Tech 
Classes exceeded 
my expectations. 
As did the presen- 
ters!" 

ROBERT LEE, 

ENGINEERING MANAGER, 

PROGRESS SOFTWARE 



1-1 First Steps to Test Automation 

Robert Walsh 

NEW If routine and mundane tests can be automated, 
testers are free to do more interesting (and valuable) 
exploratory testing. But many organizations struggle with 
how to get started, or believe that automation requires 
expensive tools and trained specialists. This class will 
demonstrate how to get started with test automation 
using open-source tools that any experienced tester can 
use. In this hands-on lab, you will work with these tools 
and learn how to make automation work for you. 

1-2 Managing the Test People 

Judy McKay 

NEW Adapted from her book of the same name, "Man- 
aging the Test People" explores techniques and methods 
for working through problems unique to the software QA 
profession. Intended for managers, test leads and people 
who may soon be in leadership positions, this class is 
about the real world, real problems and real people, pre- 
sented from a practitioner's viewpoint, and provides 
viable solutions that can actually be implemented. You'll 
hear stories illustrating concepts and get practical advice 
for the novice and affirmation for the expert. 

NOTE: A one-hour version of this class will be presented 
on April 1 . 

1-3 Improving Web Application 
Performance With Six Sigma 

Mukesh Jain 

EXPANDED Quality means more than having a defect- 
free product that meets requirements. Performance is an 
implied need; its absence will impact your business. 
Learn practical Six Sigma techniques that can improve 
Web application performance. Learn how you can plan 
the right thing, do the right thing and get the right things 
for users at the right time, every time. Hear how Six 
Sigma techniques at Microsoft improved performance of 
Outlook and Windows Live services. 

1-4 Agile & High Speed Testing 
Techniques 

Bob Galen 

NEW Approaching the testing challenge with nimble- 
ness and speed, this workshop explores practices, tools, 
techniques and philosophies that will allow allow testers 
to meet any schedule or product challenge with integrity 
and professionalism. You'll learn a variety of testing tech- 
niques to maximize focus, engage stakeholders in deci- 
sion-making, and guide the trade-offs that are inevitable 
in any successful testing project. The types of testing 
covered in this class include context-based testing, just- 
in-time, lean, exploratory, risk-based, Pareto-based and 
all-pairs testing. 
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1-5 Automated Database Testing: 
Using Stored Procedures 

Mary Sweeney 

Testers are increasingly expected to create and use SQL 
queries, stored procedures and other relational database 
objects to test data-driven environments. Learn about 
testing at the database layer through demonstrations and 
code examples, and discover tips and techniques for 
creating efficient automated tests of the database back 
end using SQL, scripting languages and relational data- 
base objects. Also learn how to create simple and effec- 
tive automated tests for the back end using Perl and 
VBScript, and how to successfully test database objects 
through examples and sample code. 

1-6 Managed Test Automation 

Hans Buwalda 

NEW Test-case automation — Ul and non-UI based — is 
an important objective for test projects. It's also complex, 
and can easily backfire. Using his 5% rules for test 
automation— no more than 5% of test cases should be 
manual, and automation should be achieved with no 
more than 5% of testing resources — Hans will teach you 
how it's all possible with Action Based Testing, a key- 
word-based test design and automation method. He will 
also offer ideas for cross-platform automation, device 
testing, multimedia, and testing with communication pro- 
tocols. 

1-7 Combinatorial Analysis: 
A Pairwise Testing Primer 

Bj Rollison 

NEW Pairwise testing reduces the number of tests by 
selecting a test set that evaluates every pair combina- 
tion. Historical and root-cause analyses show that most 
errors caused by the interaction of variables occur 
between two parameters rather than among the variables 
for three or more parameters. This class compares 
orthogonal arrays to pairwise analysis and demonstrates 
the use of a powerful combinatorial analysis tool — Micro- 
soft's Pairwise Independent Combinatorial Testing 
(PICT) — to systematically test complex, interdependent 
parameters. 
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100 Series: 10:00 am— 11:00 am 



101 Quality Throughout the Software 
Life Cycle 

Jeff Feldstein 

Quality cannot be tested into a product; it must be 
emphasized, monitored and measured from the begin- 
ning. Each team involved in the project — from manage- 
ment to marketing — plays a role in quality A carefully 
planned SDLC is a key requirement of on-time delivery of 
quality software. Explore the broad phases of develop- 
ment from a software-quality perspective, learning the 
activities required at each phase, the precise role of the 
tester or QA engineer, and how to catch bugs earlier and 
avoid common mistakes. 

102 Agile Test Development 

Hans Buwalda 

EXPANDED The short, iterative cycles, constant feed- 
back and team-based approach to quality that work for 
software also can be applied to automation. The process 
of developing and automating tests requires constant 
feedback from developers, managers, customers and 
others outside QA. This class shows how the keyword- 
oriented Action Based Testing method is effective for 
maintainable automated tests for agile, and why it makes 
sense to use agile methods for test development regard- 
less of what's being done elsewhere in the organization. 

103 Effective Use Of Static- Analysis 
Testing 

Paul Anderson 

NEW Static analysis is not a replacement for runtime 
testing; each technique is good at catching certain types 
of bugs, and some important consequences stem from 
this difference. For example, the two have different 
notions of coverage and precision. Static analysis also 
has a limited view of requirements. So what's the best 
way to use static code analysis? Through examples and 
sample code, learn the strengths and weaknesses of 
static analysis and how it can be used effectively in the 
context of a broader software-quality initiative. 

104 The Makings Of a QA Leader 

Chris Sims 

One of the best ways to increase your impact on the 
quality of your product, team, company and career is to 
step beyond the role of contributor and into leadership. If 
you feel the call to leadership but aren't sure how to 
begin, this class is for you. We'll use the Nominal Group 
Technique (NGT) to gather the group's experiences and 
ideas, identify the factors that have had the biggest 
impact and efficiently harness the collective wisdom of 
the group. 



105 Testing With Stochastic Test 
Data 

Bj Rollison 

Many tests require test data as input for variables. Real- 
world test data is important, but it really serves only to 
verify nominal input conditions. Also, repeatedly using 
the same static data doesn't provide significant benefit, 
and random data is often shunned because it may not 
be repeatable. Learn techniques to generate random test 
data for positive and negative testing using seed values 
for repeatability, and learn how to test data randomly 
from a set of static variables based on a weight factor for 
preference. 

106 Test-First GUIs: The Model- 
View-Presenter Approach 

Robert Walsh 

GUIs can be a challenge when migrating to test-driven 
development. Using a Model-View-Presenter (MVP) pat- 
tern and other common TDD techniques, GUIs can be 
built and tested as is other code that's built test-first. 
This class will show you how to construct graphical user 
interfaces test-first using MVP. Concrete examples will be 
given in C++ using both Win32 and Qt. The technique is 
applicable to virtually any development language and 
environment. 

107 Managing the Test People 

Judy McKay 

NEW Adapted from her book of the same name, "Man- 
aging the Test People" explores techniques for working 
through problems unique to software QA people. It is 
intended for managers, test leads and those ascending 
into leadership. This class is about the real world, real 
problems and real people, and provides viable solutions 
that can actually be implemented. 

NOTE: This is a one-hour version of the full-day tutorial. 



200 Series: 11:15 an -12:15 pm 



SOI Model-Based Testing For Java 
and Web-based GUI Apps 

Jeff Feldstein 

Classic automation repeats the same tests until it stops 
failing or the application ships. But users rarely traverse 
the application in the same sequence, and they're likely 
to find bugs that the automation missed. Model-based 
automated testing brings random and flexible behavior to 
automated test cases. Learn to implement MBT for Java 
and Web applications, see a demonstration — the XDE 
Tester — and download the source code containing the 
data structures, concepts and program flow for imple- 
menting a large-scale, industrial-strength model-based 
test system. 



"Great, informative 
conference for soft- 
ware testers, leads 
and managers 
alike. Useful tutori- 
als and technical 
classes of wide 
variety, but applica- 
ble for many 
QA/SQE organiza- 
tions. Well worth 
the small invest- 
ment in cost and 
time. A must-attend 
for all serious 
QA/SQE profes- 
sionals!" 

ALAN ABAR, 

SOFTWARE QUALITY 

ENGINEERING MANAGE, 

COVAD COMMUNICATIONS 



Register Earlij and Save: ^1-415-785-3419 
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"It solidifies the total 
testing experience 
and opens your 
eyes to alternative 
approaches and 
methods that you 
simply cannot get 
from books." 

JOHN CROFT, 
QA MANAGER, 
I4COMMERCE 



202 The Most Effective Ways To 
Improve Software Quality 

Chris Sims 

What are the best ways to improve software quality? 
More testers, better specs, more time for testing? Yes to 
all three, but are they under your control? For most, the 
answer is no. So what's a QA pro to do? More interest- 
ingly, what have you done? Share your most effective 
tips, tactics and practices, and tap into the collective 
wisdom in the room using the Nominal Group Technique 
(NGT). Walk out ready to make a bigger impact with the 
resources already at your disposal. 

203 The 5% Rules of Test 
Automation 

Hans Buwalda 

UPDATED No more than 5% of test cases should be 
manual, and no more than 5% of effort should be spent 
creating the remaining automation. Learn Hans 
Buwalda's 5% rules (challenges) of test automation, their 
rationale and how they can be achieved (and missed) 
from accounts of real projects. Also includes an introduc- 
tion to the keyword-driven Action Based Testing meth- 
ods (which are covered in detail in his full-day tutorial). 

204 Assess Your Way to Better Test 
Team Performance 

Michael Hackett 

Want a road map to quality? Everyone— all development 
managers, test managers and their organizations — is 
looking for ways to improve quality. Quality improvement 
can come in many forms: reducing risk by delivering 
products of higher, more predictable quality; optimizing 
time-to-market; increasing productivity; and building a 
more manageable organization. Some managers look for 
quality improvement by attempting to implement a more 
standard or formal process. This sounds good, but how 
do you get there? In this class, you'll learn how to evalu- 
ate your test process and strategy, create a culture for 
change, implement change and use effective methods 
for measuring improvement. 

205 Training the Next Generation of 
Testers 

Bj Rollison 

NEW The challenges facing software testers multiply as 
software and system complexity grow. A fraction of 
testers have formal training in the discipline and even 
fewer have read more than a single book on software 
testing. Most university computer science programs lack 
significant discussion of software testing beyond getting 
code to compile. This talk discusses specific objectives 
and grass-roots strategies to help managers with on- 
boarding new software testers to help them become 
more productive more quickly. 



m 



206 Maximizing SQL Server 2005 
Performance 

Mary Sweeney 

It might be dated, but SQL Server 2005 still performs in a 
good many organizations. Do you need help handling 
bottlenecks and performance problems? Learn tips and 
techniques to gain the most from your SQL Server from 
an experienced practitioner working on the nation's 
fourth largest database. Discover what's new in SQL 
Server 2008 and how it's different from its predecessor. 
You'll also learn how to fix quirks that stall large queries, 
as well as important techniques for boosting SQL Server 
2005 and 2008 performance. 



300 Series: 2:00 pm - 3:00 pm 



301 Balancing Test-to-Break, Test-to- 
Validate and Metrics 

Jeff Feldstein 

Software is tested to answer two questions: Does it 
work? Will it break? The tester's job is to balance invest- 
ments in each. Learn how to generate a feedback loop 
among three major areas— test-to-validate, test-to-break 
and test metrics — with examples and guidelines for opti- 
mizing resources in each. Example metrics also will be 
explored, along with suggested actions based on results 
and suggestions for communicating these concepts to 
your test team. 

302 Performance-Tuning Java 
Applications, Part 1 

Daniel Bartow 

NEW The Java virtual machine presents an interesting 
performance challenge. Look at the Java virtual machine 
from the inside out with a focus on performance-tuning 
Java applications. Learn how to tweak the JVM to per- 
form better under load. Understand Java memory gener- 
ations, garbage collection and threading, and how they 
affect your application. Expand all of these topics to the 
system level for a top-down view of your application's 
performance and capacity. 

303 Requirements Analyses and 
Collection 

Jon Quigley and Kim Pries 

NEW Requirements analysis follows multiple paths. If 
user specifications are present, requirements can be 
derived from them; if not, requirements must be elicited 
from the customer and from the dictates of the environ- 
ment, potential regulatory factors and the market seg- 
ment. Learn how to gather requirements for software 
quality function deployment, performance, and docu- 
ment derivation and creation. Also covered are require- 
ment types, attributes of good requirements, prioritization 
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and constraints (QFD, Pugh, etc.), traceability, stakehold- 
ers and reviews, feedback verification, modeling to gen- 
erate requirements, and change management. 

304 How to Break Web Software 

Joe Basirico 

The Web and Web services are prime targets for hackers, 
and network security isn't the answer. Learn a model for 
Web application testing that covers accountability, avail- 
ability, confidentiality and integrity, along with techniques 
for breaking Web applications and methods of mitigation. 
Go beyond the basics of SQL injection and cross-site 
scripting (also covered) to more-advanced and more-sin- 
ister attacks. Learn how to think about Web security vul- 
nerabilities; techniques for information gathering; and 
attacks on the client side, state, data, language, server 
and authentication. 

305 Releasing Products 

In an Agile Enterprise, Part 1 

Bob Galen 

NEW Agile projects, when developed in the enterprise, 
encounter factors beyond the scope of software devel- 
opment that need to be negotiated separately. In this 
two-part class, learn the enterprise extensions for Agile 
releases, including methods for integrating agile teams 
within a traditional management structure; iteration 
extension models required for testing across the enter- 
prise; examples of release planning dynamics required 
when integrating across multiple teams; and how to 
develop iteration release criteria and metrics that drive 
improved quality and visibility. 

306 Automated Testing 

In the .NET Environment 

Mary Sweeney 

Testing .NET apps has gone from black-box to full inte- 
gration of development and test within the .NET platform. 
This class will guide you through the pros and cons of 
working in .NET, exploring the impact that testing in .NET 
has on you, your company and the industry. Learn how 
testing in .NET compares with traditional practices, how 
the approach affects best practices, the problems and 
advantages of this approach, and what it can and can't 
do for you. 
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401 Techniques for Influencing 
Upstream Decisions 

Jeff Feldstein 

Influencing people who work for you should be easy. 
Influencing people who don't sometimes is not. Testers 
often rely on edicts from marketing and development to 



do their job. But often it's helpful for test/QA teams to 
contribute to decisions up the chain. Learn to develop 
test-specific strategies to influence departments within 
your organization. Gain techniques for getting good 
requirements from marketing and sound, testable code 
from development. 

402 Performance-Tuning Java 
Applications, Part 2 

Daniel Bartow (See 302) 

403 Moving to a Truly Virtual QA Lab 

Ian Knox 

Experimenters with virtualization soon realize a need to 
move from a basic to an automated virtual environment. 
Learn how to make that transition, best practices for 
leveraging a virtual lab in your QA process, and real- 
world examples of virtual test lab implementations. Learn 
how virtualization is being applied in test labs, how to 
select a solution, how to implement and configure a vir- 
tualized environment, and how to integrate existing test 
and development tools. 

404 The Path to a Secure Application 

Ryan Berg 

NEW Do you know where to look in your applications to 
be sure your source code isn't putting you at risk? This 
presentation will detail the path you must follow to find 
and eliminate the coding errors and design flaws that 
expose data, threaten operations, and cost your organi- 
zation time and money. 

405 Releasing Products 

In an Agile Enterprise, Part 2 

Bob Galen (See 305) 

406 Static Analysis on Steroids 

Nada daVeiga 

NEW With the growing popular- ity of automated unit 
testing tools, many developers have the opportunity to 
click a button and get a long list of potential, uncaught 
runtime exceptions in new or legacy code. The larger the 
code base, the longer the list. This session will explain 
and demonstrate how to apply flow analysis to zero in on 
the bugs that pose real risks, without having to spend 
time examining those that are merely false positives. 
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501 The Hunt for Malicious Code 

Ryan Berg 

NEW Although some exploits are designed to announce 
their success, most remain quiet until their day has 
come. Malicious code is hard to detect because it often 
shows itself only as a small anomaly. Penetration testing, 
static analysis and manual review must be combined to 
profile the application, identify potential attack points, 
and allow the organization to identify anomalous tech- 
nologies lurking within your code. This talk will outline 
and demonstrate how to effectively look for malicious 
code in your applications. 

502 Tester Career Paths For 
An Outsourced Economy 

Michael Hackett 

NEW What work should be recommended for outsourc- 
ing, and which tasks are best kept in-house? What new 
job skills are needed for the team to remain important? 
Should we learn project or automation management, 
build and release engineering, unit testing or business 
modeling? As companies seek to reduce costs, many 
look to outsource testing. Learn through real-world 
examples the new role of a U.S.-based tester in current 
development teams that use or plan to use outsourcing. 
Gain clear strategies to achieve those skills. 

503 Strategies for Unit Testing in 
Spite of Legacy Code, Part 1 

BHILoeb 

NEW When attempting test-driven development, teams 
face obstacles such as how to handle projects that were 
not designed to be unit tested and old components writ- 
ten in different languages. Learn how to get software 
under test in spite of legacy code. Using Visual Studio, 
C#, NUnit and NMock, explore common hurdles when 
introducing unit testing into an existing code base. Part 1 
covers code organization, refactoring for unit testability, 
and ways to wrap and isolate interactions. Part 2 covers 
using mock objects to handle code dependencies, and 
how they differ from fakes and stubs. 

504 Setting Agile-Centric Release 
Criteria 

Bob Galen 

NEW A huge quality-centered activity among agile 
teams is defining "doneness" as it relates to the end of an 
iteration or sprint. Most teams don't focus on complex cri- 
teria, but rather look to deliver features or stories to a mini- 
mal set of acceptance criteria or tests. Learn the four lev- 
els of doneness, see examples of each, and explore 
patterns to exercise collaborative skills to influence teams 
toward more-complete and more-valuable work. 
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505 Testing Live Apps 
With Visualization 

Lars Ewe 

NEW Production applications are notoriously difficult to 
test because of the availability and integrity requirements 
of live data. This session will evaluate new zero-impact 
testing methods for live applications, leveraging virtual- 
ization without adversely affecting the production appli- 
cation. 

506 The Marriage of Agile 
And Test Management 

Brian Massey 

NEW Agile is about short release cycles and just 
enough documentation. Test management brings to 
mind monolithic test plans. One focuses on customer- 
driven unit and function testing, the other on the water- 
fall; one on weekly iterations, the other on year-old 
requirements. Can the two coexist? Yes, they can. Learn 
how agile and test management and planning can coex- 
ist to create a tester Utopia. 
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601 Is Your Inversion Of Control 
Framework Secure? 

Ryan Berg 

Unlike common application vulnerabilities such as cross- 
site scripting or SQL injection attacks, vulnerabilities that 
can occur through improper use of inversion-of-control 
frameworks such as Spring and Struts are actually 
design issues that, if not implemented properly, make 
applications just as vulnerable. The right security aware- 
ness in the design and testing phase when using these 
frameworks can protect enterprises from exploitation 
after deployment. Learn several types of these newly dis- 
covered vulnerability classes and best practices for pre- 
venting them. 

60S Test Automation Of 
Search Results and Other 
Data-driven Apps 

Vitaly Bulgakov 

NEW Can testing and analysis of a search-results page 
be automated? What is the right test-script architecture? 
Learn to use QuickTest Pro and Perl as efficient instru- 
ments to serve this purpose. Write tests that are reusable 
and that require no recording. Learn to program objects 
for multiple use prior to application readiness, use regular 
expressions for website analysis, deploy regression-test 
essentials for search engine testing, test advertiser 
impressions on your website and in search results, and 
much more. 



Register Early and Save: miiJiiJ.sipcon.com 




TeMnicfll Classes 



603 Strategies for Unit Testing in 
Spite of Legacy Code, Part 2 

By Bill Loeb 

(See 503) 

604 Testing in an Agile Environment 

Robert Walsh 

Contrary to what some believe, the agile view of testing 
is not "Don't test" or "Only developers should test." Agile 
augments traditional testing by professionals with tests 
written and executed by developers and customers. TDD 
and unit testing; user acceptance; and exploratory, 
usability, load and performance, and integration testing, 
along with other techniques, play significant roles in agile 
environments. Learn how various testing efforts are used 
in responsible approaches to agile development, and 
explore ways that traditional QA efforts can be adapted 
to fit neatly agile processes. 

605 Managing Embedded Product 
Testing 

Jon Quigley and Kim Pries 

NEW Testing starts well in advance of the physical work. 
Successful test creation and deployment mean planning 
for testing early in the development effort. By the end of 
the class, participants will know how to plan and execute 
tests, report results, and record metrics. Learn how verifi- 
cation via reviews, simulation code, design inspections 
and test fixturing brings an objective set of eyes to the 
results of the development team. We'll also cover soft- 
ware quality attributes, test planning, supporting sys- 
tems, test statistics and alternatives to testing. 

606 Experiences with Keyword 
Automation 

Hans Buwalda 

NEW Keywords are now in the mainstream of test 
automation, but they are not a silver bullet. Hear a short 
introduction of keyword automation, with an emphasis 
on Action Based Testing. Then delve into its pitfalls 
through actual project cases involving keyword automa- 
tion implementation. This session revolves around the 
sometimes reluctant, and often very funny, implementa- 
tion of this practice. The cases will show the lessons 
learned — in some cases, quite painfully — and typical do's 
and don'ts. 
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701 Effective Training 

Of an Offshore Test Team 

Michael Hackett 

Working with offshore teams is a fact of life, but many 
still struggle to do it effectively. Training your offshore 
team is as critical to the success of your project as get- 
ting the right information to and from these remote work- 
ers. Learn through real-world examples the key elements 
of successful offshore testing, including training in the 
areas of process, product/domain knowledge and testing 
techniques, and how training can be used as a retention 
tool for offshore staff. 

702 A Buzz About Fuzz: Finding 
Software Vulnerabilities 

Joe Basirico 

Fuzzing feeds random inputs to applications in an 
attempt to choke them. It's a simple, highly automatable 
way to trap uncommon and unforeseen errors that may 
have been overlooked. Learn how to include fuzz testing 
in your QA efforts, explore fuzz testing tools and tech- 
niques, and discover how fuzzing provides insight into 
application behavior. Hear examples of how fuzz testing 
has uncovered hard-to-find bugs and how it can provide 
metrics on software correctness. After this class, you'll 
be able to apply fuzz testing immediately. 

703 The Business Value 
Of Usability 

Jeff Johnson 

NEW Learn, in business terms, why it is important for 
software development organizations to strive for highly 
usable products. This class describes how investing in 
usability can increase customer satisfaction, reduce the 
cost of sales and support, increase return on investment, 
decrease time-to-profitability and reduce business risk. 
We will also cover how, when and how much to invest in 
usability. 

704 End-to-End Performance 
Process: From Requirements 
To Production Monitoring 

Alfred Wong 

Performance test engineers often engage in projects only 
during planning and execution of performance tests. 
There are more ways they can contribute, such as by fix- 
ing performance bugs or avoiding them in the first place. 
Learn a process from requirements to production moni- 
toring that focuses on performance each step of the way. 
Enhance the performance role of your current process 
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toward increasing tester contribution, forewarning of 
possible challenges, and explaining how tools and tech- 
niques can overcome them. 

NOTE: See related class 801. 



705 Optimizing The Testing Effort 
With Keyword-Driven Frameworks 

Brian Massey 

Time is always in short supply. Learn about automating 
reusable manual tests created early in a project by using 
a keyword-driven framework. Take away that framework 
and learn how to integrate it with an automated func- 
tional testing tool. 

706 Optimizing Web 2.0 Application 
Performance 

Hon Wong 

NEW The Web has become a dynamic platform where 
users and agents work together, share ideas and add 
value across myriad interests. Examine the shortcomings 
of today's Web monitoring techniques. Learn a new, 
holistic approach to managing the performance of Web 
2.0 applications, and see how it is applicable to complex 
SOA and Web services technologies. 

707 Five Common Mistakes When 
Securing Web Applications 

Lars Ewe 

Despite the published security practices of the OWASP 
and WASC threat classifications, a number of mistakes 
are still commonly made. This class explores five com- 
mon mistakes of securing Web applications and the 
impact that these design flaws have on the overall secu- 
rity of an application. Issues such as client-side trust 
relationships, failure to properly secure application redi- 
rection mechanisms, and other design and configuration 
elements can quickly undermine application security, 
even when diligent security practices are in place. 
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801 Performance Bugs And 
Investigation Strategies 

Alfred Wong 

NEW Performance bugs appear in many shapes and 
forms, and each requires its own investigation strategy. 
Learn about the different types of performance testing. 
Explore the performance bugs common to Web applica- 
tions and the corresponding performance tests that 
expose them. Discover how to participate actively in a 
performance bug investigation and how to apply the 
strategies to projects. 
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NOTE: This class builds on End-to-End Performance 
Process (704) but also may be taken separately. 

802 Performance Testing 

Of Large Distributed Systems 

Jon Quigley and Kim Pries 

NEW As with other kinds of software, large-scale dis- 
tributed embedded systems have a basic tool set. Learn 
a four-mode testing approach used at Volvo comprising 
compliance testing, extreme scenario testing, combina- 
torial testing and stochastic testing. Also covered will be 
special handling of specifications, software attributes, 
interrupts, polling (when and why to use), walkthroughs, 
inspections and simulation testing. Learn about testing 
data buses, communication protocols, emergent system 
phenomena and other system-related issues as well as 
effects of code modification on the system and the sub- 
system. 

803 Designing with the Mind In Mind 

Jeff Johnson 

NEW If you're a software designer, developer or tester 
who never took cognitive psychology in school, this 
class is for you. There's a psychological basis for Ul 
design rules; they're not simple recipes to be applied 
mindlessly. To apply them effectively, you must determine 
their applicability (and precedence) in specific situations. 
It also requires balancing the trade-offs that arise when 
design rules appear to contradict. By understanding the 
underlying psychology, designers enhance their ability to 
interpret and apply the rules of good Ul design. 

804 Performance Engineering for 
Large Application Clusters 

Daniel Bartow 

NEW When it comes to testing large n-tier applications, 
new teams are underequipped and can't simulate the 
expected number of users. The class covers perform- 
ance concerns that are unique to large clusters, such as 
network crosstalk and bandwidth utilization. Learn how 
to conduct performance testing on applications with tens 
to hundreds of instances running in production, plan for 
anticipated user loads in the millions, identify perform- 
ance objectives, scale out the right environment for test- 
ing, and see the performance testing through to produc- 
tion. 

805 Web Services/SOA Testing 
Made Easy 

Meera Subbarao 

NEW Learn how SoapUl can be used to write functional 
tests by creating and executing test cases against your 
Web services. Includes a demonstration using Groovy 
scripts for assertions, properties setup and teardown for 
each test case. Also covers use of the tests in a continu- 
ous integration environment, with the Hudson Java 
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servlet as an example of integration and execution of the 
tests; breaking the build when tests fail; and generating 
reports. 

NOTE: A laptop is strongly recommended for this class. 

806 Testing in the Cold (And Ideas to 
Warm You Up) 

Hans Buwalda 

NEW "Testing in the cold" happens when a test project 
is not going your way. Commitment and cooperation are 
lacking, people might show resistance, you might be 
blamed for project failures, or the testing and automation 
work might prove more complicated than expected. As a 
tester or test manager, you can feel left out in the cold. 
Learn more than 45 tips and techniques you can use to 
get yourself out of typical situations of testing in the cold. 



900 Series: 3:30 pm— 4:30 pm 



901 Tools and Techniques 
For Fixing Memory Errors 

Chris Gottbrath 

NEW An application on the server needs to be restarted 
every few days or it slows to a crawl. Is it a memory 
leak? Do you even know how to find out? Learn how in 
this class, and help developers stop writing leaky code. 
Finding memory leaks is an acquired skill that requires 
constant vigilance to remain effective. And there is a 
wrong way. Learn the right way, and keep memory errors 
a distant memory. 

902 GUI Bloopers: Avoiding 
Common Design Mistakes 

Jeff Johnson 

Will your application pass the test, or will users be 
gnashing their teeth and shaking their fists? Attend this 
session and discover all the blunders that might be in 
your interface. Based on the book "GUI Bloopers 2.0" 
and presented by its author, this talk is not just about 
making apps pretty. Bring your sense of humor; this talk 
is sprinkled with humorous screen images illustrating 
common problems and their solutions. It will leave you 
better able to critically review apps you develop or test. 

903 Testing Visibly 

David Kapfhammer 

One of the worst things a testing organization can do is 
to operate in obscurity from the rest of IT. If the testing 
organization doesn't treat developers, business analysts 
and users like customers, they'll lose credibility as the 
"team that operates behind the curtain," and ultimately 
become ineffective. Learn a strategic road map that test 



organizations can use to operate visibly and transpar- 
ently. Learn how and why to issue a user manual for 
engaging testing services, implement a specific opera- 
tional workflow and maintain an open-door policy. 

904 Test Destiny: The Psyche of a 
Professional Tester 

Brian Massey 

NEW Let's face it, software testers are different. As kids, 
we wanted to break things — not to be destructive, but to 
understand how things worked and use them in unin- 
tended ways. We ask, "What if?" We push the big red 
button marked "Don't push" because we want to know 
what will happen. We've been testing from the begin- 
ning — it's our destiny. Learn how testers are perceived by 
peer groups and how that knowledge can help you add 
value to your organization. 

905 Finding Vulnerabilities Without 
Attacking 

Rick McPhee 

NEW Dynamic taint propagation allows testers to find 
vulnerabilities without modifying existing functional tests. 
It enables security testing inside a QA organization 
because it allows tight integration with existing QA infra- 
structure and solid usability for security nonexperts. This 
talk will explain how dynamic taint propagation works, 
show how to retrofit an existing executable to perform 
dynamic taint propagation, and demonstrate how a 
tester can use a typical suite of functional tests to find 
vulnerabilities without the need for malicious input or 
security expertise. 

90G Finding .NET Performance 
Bottlenecks Using PerfMon 

Joy Nandi 

NEW We've all heard of Microsoft's Performance Moni- 
tor, but does anyone actually use it? Learn how this 
powerful, free tool can identify performance bottlenecks 
in .NET applications by watching six critical areas of per- 
formance. Learn the significance of each performance 
counter and how they can be used to identify critical per- 
formance thresholds. 

NOTE: A working knowledge of Microsoft .NET Frame- 
work, networking, IIS 2.0 and operating system concepts 
is recommended. 
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Paul Anderson is VP of engi- 
neering at GrammaTech. A software 
industry veteran, he has worked with 
NASA, the FDA, FAA, MITRE, Draper 
Laboratory, GE, Lockheed Martin and 
Boeing to apply automated code analy- 
sis to critical projects. His experience includes static 
analysis and automated testing and program trans- 
formation, and his research on static analysis tools 
and techniques has been widely published. 

Dan BartOW is the manager of 
performance engineering at Intuit. Pre- 
viously he was a senior performance 
engineer for ATG, where he helped 
deploy large-scale sites for American 
Airlines, American Eagle Outfitters, 

AT&T Wireless, Best Buy, Neiman Marcus and Sony 

Online Entertainment. 

Joe BasiriCOhaS is an applica- 
tions security expert. At Security Inno- 
vation, he is responsible for delivering 
security courses to software teams in 
need of application security expertise. 
He has trained developers and testers 
from Microsoft, HP, EMC, Symantec, Liberty 
Mutual, Sony, State Farm, Credit Suisse, 
Amazon.com, Adobe, ING and other world class 
organizations. 

Ryan Berg is a co-founder and 
I lead security architect of Ounce Labs, 
which develops software vulnerability 
risk-management solutions. Previously, 
he co-founded kernel-level security pio- 
neer Qiave Technologies (acquired by 
WatchGuard Technologies). Ryan also served as a 
senior software engineer at GTE Internetworking, 
where he led the architecture and implementation of 
new managed firewall services. 

j0t± Vitaly BulgakOV joined Veri- 
zon's Superpages online directory - 
| now Idearc - in 2006 to work on per- 
y formance and stress testing, search 
\ analysis, data mining and test automa- 
tion. He was a professor at Moscow 
State University of Civil Engineering, and has been 
recognized by the Alexander von Humboldt Foun- 
dation and the Norwegian Research Society. 

Hans Buwalda leads 

LogiGear's Action Based Testing (ABT) 
research and development. He is an 
| internationally recognized expert in 
action-based test automation, test 
development, and testing technology 
management. 

PNada daVelga is product man- 
ager of Java solutions at Parasoft. 
Nada's background includes develop- 
ment of service-oriented architecture 
for integration of rich media applica- 
tions such as Artesia Teams, IBM Con- 
tent Manager, Stellent Content Server and Virage 
Video Logger. 

Lars Ewe is CTO and vice presi- 
dent of engineering at Cenzic. His 
background includes Web application 
development and security, middleware 
infrastructure, software development, 
and application/system manageability 
technologies. Previously, he was software develop- 
ment director at Advanced Micro Devices, where he 








oversaw AMD's systems manageability and related 
security strategy and engineering efforts. 

Jeff Feldsteln manages a team 
of 40 testers for Cisco Systems. During 
his career, he has been a software 
developer, tester, development man- 
ager, and computer consultant. His 
specialties include internetworking, 
real-time embedded systems, communications sys- 
tems, hardware diagnostics and firmware, data- 
bases and test technologies. 

Bob Galen is an agile methodolo- 
gist, practitioner, coach, and president 
and principal consultant of RGCG, 
where he guides companies and teams 
with adoption and organizational shifts 
to Scrum and other agile methods. He 
has held software development and quality assur- 
ance positions at Bayer, Bowe Bell & Howell, Chan- 
nelAdvisor, EMC, Lucent, Unisys, and Thomson. 

Chris Gottbrath is product 

manager of TotalView Technologies, a 
debugging tool maker. Previously, Chris 
wrote cosmological simulations using C 
and MPI on a small-scale Beowulf clus- 
ter as a graduate student of astro- 
physics at the University of Arizona. 

^|^ Michael Hackett is a founding 
j ^ partner of testing services company 
t*r J* LogiGear. His experience includes soft- 
ware engineering and testing of appli- 
cations developed for deployment 
across multiple platforms. He writes 
and teaches at LogiGear University and for the UC 
Berkeley Extension, and is co-author of Testing 
Applications on the Web: Test Planning for Mobile 
and Internet-Based Systems. 

^■t Mukesh Jain is quality manager 
W j for Microsoft Global Foundation Ser- 
vices. He is a Six Sigma Black Belt, 
\ TSP coach, PSP instructor, SEI-certi- 

fied PSP developer and engineer, ISO 
^ 9000 internal auditor, CQA, CQIA, 
CSQA, CSTE and Microsoft Office specialist and 
has led companies through Six Sigma, ITIL, MOF, 
TSP/PSR ISO 9000 and SEI CMM Level 3-5 imple- 
mentation and certification. 

Jeff Johnson is a respected 
expert and consultant in the field of 
human-computer interaction, and 
author of GUI Bloopers 2.0: Common 
User Interface Design Don'ts and Dos. 
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Ian KnOX has been in the software 
development industry for more than 15 
years. He is director of product man- 
agement for Skytap. Previously, he was 
group product manager for Microsoft's 
Visual Studio, and principal consultant 
at Pricewaterhouse-Coopers, where he worked on 
global software delivery projects for Fortune 500 
clients. 

Bill Loeb is an engineering man- 
ager at SaaS company ChannelAdvisor, 
which helps retailers maximize profits 
across multiple e-commerce channels. 
He is also experienced in software 
development and management for the 
airline and medical industries and with coding class 
libraries for developers, and is a champion of auto- 






mated unit and acceptance testing, Bill has helped 
introduce agile and XP practices to many develop- 
ment teams. 

David Kapf hammer is prac- 
tice director for the Quality Assurance 
and Testing Solutions organization at 
Keane. He is experienced in all aspects 
of systems design and implementation 
including organizational leadership, 
technical solution, quality mechanisms and enter- 
prise architecture. He's also a doctoral student at 
George Mason University. 

0^^ Brian Massey is a product 

9k manager at IBM Rational, where his 
' role is to master the domains of func- 
tional testing and test management. His 
experience includes hardware and soft- 
ware system architecture development 
to analysis, design and deployment of network 
infrastructure, and coding and testing of software 
modules and component-based systems. 

Judy McKay is a high tech 
industry veteran. She has managed 
departments encompassing all aspects 
of the software life cycle, including 
requirements design and analysis, soft- 
ware development, quality assurance, 
testing, technical support, professional services, 
configuration management, technical publications 
and software licensing. Her career has spanned 
commercial software companies, aerospace, for- 
eign-owned R&D, networking and various Internet 
companies. 

^^^ Rick McPhee is senior director 
j ^ of core analysis at security tool maker 
,f ^**^fc| Fortify. Previously he held vice presi- 
V. ,>tml dent of engineering positions at data 
%^J? encryption vendor Vormetric and 
^^™ Sychron, a developer of virtual desktop 
solutions. Rick holds a PhD in computer science 
from the University of Oxford. 

Joy Nandi is an application pro- 
grammer at Progressive Insurance, 
where he is responsible for perform- 
ance testing and engineering of .NET- 
based Web services and infrastructure 
capacity planning. He graduated from 
Arizona State University with a dual MS in com- 
puter-aided-design and IT. 

Kim Pries is director of product 
integrity and reliability at Stoneridge 
Electronics-North America, which man- 
ufactures performance analysis sys- 
tems for the automotive industry. He 
holds master degrees from UTEP and 
Carnegie Mellon University and teaches the ASQ 
Six Sigma Black Belt Certification class for UTEP 
professional education. He is author of Six Sigma 
for the Next Millennium: A CSSBB Guidebook. 

I Jon Quigley is manager of Volvo 
| Trucks 3P's Electrical/Electronic Sys- 
tems and Verification group, where he 
creates system engineering specifica- 
tions for the electrical and electronics 
I systems, and manages test and verifi- 
cation activities. He has secured four U.S. patents 
and has others pending, and is co-author of Project 
Management of Complex and Embedded Systems: 
Ensuring Product Integrity and Program Quality. 
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experience - 




Bj RolliSOn is a test architect with 
Microsoft's Engineering Excellence 
group, where he designs and develops 
technical training curricula in method- 
ologies and automation. Bj has more 
than 16 years of computer industry 
- mostly with Microsoft - including 
Microsoft's Internal Technical Training group and 
test manager in Microsoft's Internet Client and Con- 
sumer Division. 

| Chris SilTIS is a teacher, coach, 
B-,;.S facilitator, consultant, coder, and agile 
I evangelist. He's also founder of the 
M Technical Management Institute, facili- 
^^ fl tator of the Bay Area Engineering Man- 
^^ II agers Support Group, chair of the IEEE 
Technical Management Council of Silicon Valley, and 
is on the board of the Bay Area chapter of the Agile 
Project Leadership Network. 

Meera Subbarao is a senior 

software consultant for Stelligent, where 
she helps customers create production- 
ready software using agile practices. A 
1 7-year software programmer, she has 
^ worked in Asia, the Middle East and 
U.S., and is Sun-certified as a Java Programmer 
and Web Component Developer.. She's also team 
leader for the Javalobby/dzone book review team, 
and has had several articles published. 

Mary Sweeney has been devel- 
oping, using, and testing relational 
database systems for more than 20 
years for such companies as Boeing 
and Software Test Labs. She is a col- 
lege professor, the author of Visual 
Basic for Testers and A Tester's Guide to .NET Pro- 
gramming, and an MCP in SQL Server. Mary serves 
on the board of the International Institute of Soft- 
wareTest. 

Robert Walsh is president and 
manager of application development at 
EnvisionWare, which provides software 
solutions for public and academic 
libraries. He is an experienced program- 
i * k mer, mostly with C and C++. Robert 
began applying agile methodologies to his company 
several years ago, and has implemented a hybrid of 
Scrum and Extreme Programming, and continues to 
refine the process. 

Alfred Wong is the performance 
test advisor at Expedia.com. He has 
experience in software design and 
*< development, test management, 
I resource planning and scheduling, 
^^^^^ managing outsourced projects, guiding 
performance certification processes, technical con- 
sulting, performance tuning and capacity planning. 
Alfred holds an MS in electrical engineering. 

Hon Wong is CEO of Symphoniq. 
Previously, he co-founded NetlQ and 
has also co-founded and served on the 
boards of several other companies, 
including Centrify, EcoSystems Soft- 
ware (acquired by Compuware), Digital 
Market (acquired by Oracle) and other technology 
companies. He holds BS degrees in electrical engi- 
neering and industrial engineering from Northwest- 
ern University and an MBA from the Wharton 
School. 
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Hotel & Travel 



March 31 - April 2, 2009 

San Mateo Marriott 
San Mateo, CA 





San Mateo Marriott 
San Francisco Airport 

1770 South Amphlett Blvd. 

San Mateo, CA 94402 

Phone:+1-650-653-6000 

Fax:+1-650-653-6088 



Reservations 



The Software Test & Performance Conference Spring has reserved a block of rooms 
for attendees at a special rate of US$1 79 per night. To receive the discounted rate, 
call the hotel directly at the number above. Identify yourself as being with the Software 
Test & Performance Conference. These rates are available with reservations beginning 
on Saturday, March 28 (check-in) through Saturday, April 4 (check-out). 

You can also use the hotel link on the STPCon website, www.stpcon.com. 

To make reservations through www.marriott.com/sfosa, use the code STPSTPA to 
receive the STPCon rate. 

Reservations must be made by Thursday, March 5, 2009. 

Hotel Highlights 

The San Mateo Marriott San Francisco Airport is the hotel of choice for travelers with 
commitments in Silicon Valley and San Francisco. This 11 -acre San Francisco airport 
hotel combines the look and feel of a first-class San Francisco luxury resort with the 
efficiency of Silicon Valley's state-of-the-art technology and amenities. 

Marriott's ultra-adaptable room allows you to simply plug in and: 

• Display your laptop on the TV 

• Use split-screen technology to multitask 

• Play your MP3 player through the TV's speakers 

• Connect your personal DVD player to the TV 

NEW FOR 2009! » In-room high speed internet access is INCLUDED for all STPCON 
attendees. The charge will be deducted from your hotel bill at check-out. 

Centrally located to both San Jose and downtown San Francisco, the reinvented San 
Mateo Marriott hotel is convenient for all travelers. 

• 10 minutes from San Francisco International Airport 

• 100% nonsmoking hotel 

• Less than one half-hour from San Jose International Airport 

• Midway between San Francisco and the Silicon Valley high-tech business center 

• Less than 30 minutes from the Golden Gate Bridge, Chinatown, Pier 39, Alcatraz, 
Union Square, Fisherman's Wharf and Half Moon Bay 
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Super Early Bird 


Early Bird 


Bird Rate 


Full Price 




Register By: 


Jan 23 


Feb 20 


Mar 13 


After Mar 13 


■ 


Three-Day Full Event Passport 
Technical Conference & Tutorials 

March 31 - April 2, 2009 


$995 


$1,095 


$1,295 


$1,595 


Two-Day Technical Conference Only 

April 1 - 2, 2009 


$895 


$995 


$1,195 


$1,495 


One-Day Tutorials Only — March 31, 2009 


$695 


$795 


$995 


$1,195 


Exhibits Only — April 1 - 2, 2009 


FREE 


FREE 


FREE 


$50 





REGISTER ONLINE TODHV 



Three-Day Full Event Passport 
Registration Includes: 

• Admission to tutorials and technical 
classes 

• Admission to keynote(s) 

• Admission to Exhibit Hall and 
Attendee Reception 

• Admission to Lightning Talks and 
Hands-On Tool Showcase 

• Conference materials: CD ROM of 
all presentations available 

• Continental breakfast, coffee 
breaks, and lunch where indicated 

• Free WiFi in all areas 



Two-Day Technical Conference 
Only Registration Includes: 

• Admission to technical classes 

• Admission to keynote(s) 

• Admission to Exhibit Hall and 
Attendee Reception 

• Conference materials: CD ROM of 
all presentations available 

• Continental breakfast, coffee 
breaks, and lunch where indicated 

• Free WiFi in all areas 



One- Day Tutorials Only 
Registration Includes: 

• Admission to tutorials 

• Admission to Lightning Talks and 
Hands-On Tool Showcase 

• Conference materials: CD ROM of 
all presentations available 

• Free WiFi in all areas 

• Continental breakfast, coffee 
breaks, and lunch where indicated 

• Free WiFi in all areas 



All prices are in US$. 



Exhibit Hall Only Registration 
Includes: 

• Admission to Exhibit Hall 

• Admission to Attendee Reception 

• Free WiFi in conference areas only 



Register Today: +1-41 W85-3419 or miiJiiJ.sipcon.com 



Horn to Register 



Register online at www.stpcon.com and use one 
of the following payment methods: 



Special Discounts 



Use the discount codes below to save on your 
registration fees. Codes cannot be combined. 



Credit Card. You can use the secure online form to pay via credit card and get 
immediate confirmation of your classes. MasterCard, Visa and American 
Express are accepted cards. You'll receive a REGISTRATION RECORD and 
RECEIPT. Please print out these pages and bring them with you to the Confer- 
ence. Present them at the Registration Desk to pick up your badge and any 
course materials. 

Check. Fill out the online registration form. Print out the REGISTRATION 
RECORD and RECEIPT and mail to Redwood Collaborative Media, 105 Maxess 
Road, Suite 207, Melville, NY 11747 with your payment. Online registrations 
that are mailed without payment will not be confirmed until payment is received. 

Purchase Order. If you register using a P.O., you will be invoiced immediately 
for the registration amount. Payment must be received before your registration 
can be confirmed. 



Group. Get an addition $1 00 off per person if you register 4 or more people from 
one company for the Full Event Passport. Use code GROUP in the discount code 
field. 

Government. Federal, State and Local Government employees can receive an 
additional $100 off the Full Event Passport. Enter code GOV in discount code 
field. 

Educational Institutions. Personnel employed by or attending educational institu- 
tions can get $100 off the Full Event Passport with discount code EDU. 

Alumni. Have you attended any of BZ Media's previous Software Test & Perfor- 
mance Conferences? If so, you're eligible for a $100 alumni discount on the Full 
Event Passport. Enter the code ALUMNI in the discount code field. 

User Groups. Contact Donna Esposito, desposito@bzmedia.com, to see if your 
group is eligible for a discount. 



IflnCGllflNOn rOllCl| You can receive a full refund, less a $50 registration fee, for cancellations made by February 24, 2009. Cancellations after this date are non 
refundable. Send your cancellation in writing to registration@bzmedia.com. Registrations may be transferred to another person. 
Questions: Contact Donna Esposito at desposito@stpcollaborative.com or +1-415-785-3419. 
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Redwood Collaborative Media 
105 Maxess Road, Suite 207 
Melville, NY 11747 
www.stpcollaborative.com 
1-631-393-6051 



March 31 - April 2, 2009 

San Mateo Marriott 
San Mateo, CA 



